Files
twx-linux/include/linux
Andy Lutomirski 23adbe12ef fs,userns: Change inode_capable to capable_wrt_inode_uidgid
The kernel has no concept of capabilities with respect to inodes; inodes
exist independently of namespaces.  For example, inode_capable(inode,
CAP_LINUX_IMMUTABLE) would be nonsense.

This patch changes inode_capable to check for uid and gid mappings and
renames it to capable_wrt_inode_uidgid, which should make it more
obvious what it does.

Fixes CVE-2014-4014.

Cc: Theodore Ts'o <tytso@mit.edu>
Cc: Serge Hallyn <serge.hallyn@ubuntu.com>
Cc: "Eric W. Biederman" <ebiederm@xmission.com>
Cc: Dave Chinner <david@fromorbit.com>
Cc: stable@vger.kernel.org
Signed-off-by: Andy Lutomirski <luto@amacapital.net>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2014-06-10 13:57:22 -07:00
..
2014-06-03 23:12:20 +02:00
2014-06-04 13:34:30 +09:00
2014-05-20 10:30:40 +09:00
2014-06-06 16:08:13 -07:00
2014-06-02 14:56:01 -07:00
2014-05-27 17:38:11 -07:00
2014-06-04 16:54:07 -07:00
2014-06-04 16:54:21 -07:00
2014-06-04 16:54:12 -07:00
2014-05-20 15:19:25 -05:00
2014-06-06 16:08:12 -07:00
2014-06-04 16:53:57 -07:00
2014-06-04 16:53:56 -07:00
2014-05-30 11:35:54 -06:00
2014-06-04 16:53:57 -07:00
2014-06-04 16:53:57 -07:00