Files
linux/fs/xfs
Dwight Engen eaeeaec383 xfs: add capability check to free eofblocks ioctl
commit 8c567a7fab upstream.

Check for CAP_SYS_ADMIN since the caller can truncate preallocated
blocks from files they do not own nor have write access to. A more
fine grained access check was considered: require the caller to
specify their own uid/gid and to use inode_permission to check for
write, but this would not catch the case of an inode not reachable
via path traversal from the callers mount namespace.

Add check for read-only filesystem to free eofblocks ioctl.

Reviewed-by: Brian Foster <bfoster@redhat.com>
Reviewed-by: Dave Chinner <dchinner@redhat.com>
Reviewed-by: Gao feng <gaofeng@cn.fujitsu.com>
Signed-off-by: Dwight Engen <dwight.engen@oracle.com>
Signed-off-by: Ben Myers <bpm@sgi.com>
Cc: Kees Cook <keescook@google.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2013-12-08 07:29:15 -08:00
..
2013-05-07 18:45:36 -05:00
2013-08-12 17:49:38 -05:00
2013-05-07 18:45:36 -05:00
2011-08-12 16:21:35 -05:00
2011-08-12 16:21:35 -05:00
2012-11-19 20:11:24 -06:00
2013-05-30 17:26:31 -05:00
2013-08-12 16:53:39 -05:00
2013-09-12 09:42:08 -05:00
2013-09-09 17:43:05 -05:00
2013-09-10 18:56:32 -04:00
2012-11-19 20:11:24 -06:00
2011-08-12 16:21:35 -05:00
2011-08-12 16:21:35 -05:00
2013-08-12 16:55:17 -05:00
2011-03-07 10:09:35 +11:00
2013-08-12 16:53:39 -05:00
2011-08-12 16:21:35 -05:00
2013-08-12 16:53:39 -05:00
2013-08-12 16:55:17 -05:00
2013-06-27 14:26:21 -05:00
2013-08-12 16:55:17 -05:00
2012-05-14 16:20:54 -05:00
2011-08-12 16:21:35 -05:00
2013-08-12 16:56:06 -05:00
2013-08-12 16:53:39 -05:00
2013-08-13 16:21:21 -05:00
2013-08-13 16:21:21 -05:00
2013-09-09 17:43:05 -05:00
2013-05-07 18:45:36 -05:00
2013-05-07 18:45:36 -05:00
2013-09-10 18:56:32 -04:00
2012-10-17 12:01:25 -05:00
2013-08-30 14:14:35 -05:00
2013-08-30 14:14:35 -05:00
2013-08-12 16:53:39 -05:00
2013-05-07 18:45:36 -05:00