Andreas Gruenbacher 0a63dca5ae [PATCH] setting ACLs on readonly mounted NFS filesystems (CVE-2005-3623) ...

We must check for MAY_SATTR before setting acls, which includes
checking for read-only exports: the lower-level setxattr operation
that eventually sets the acl cannot check export-level restrictions.

Bug reported by Martin Walter <mawa@uni-freiburg.de>.

Signed-off-by: Andreas Gruenbacher <agruen@suse.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

2005-12-26 16:08:59 -08:00

..

9p

[PATCH] v9fs: remove additional buffer allocation from v9fs_file_read and v9fs_file_write

2005-10-11 09:46:54 -07:00

adfs

[ARM] fs/adfs/adfs.h: "extern inline" doesn't make sense

2005-08-20 17:20:28 +01:00

affs

[PATCH] update filesystems for new delete_inode behavior

2005-09-09 13:57:27 -07:00

afs

[PATCH] Fix up symlink function pointers

2005-08-19 18:08:21 -07:00

autofs

[PATCH] autofs: fix "busy inodes after umount..."

2005-09-09 13:57:31 -07:00

autofs4

[PATCH] Fix up symlink function pointers

2005-08-19 18:08:21 -07:00

befs

befs: fix up missed follow_link declaration change

2005-08-20 13:20:01 -07:00

bfs

[PATCH] bfs iget() abuses

2005-10-04 13:22:01 -07:00

cifs

[PATCH] cifs: Add support for suspend

2005-09-23 11:37:53 -07:00

coda

…

cramfs

[PATCH] fs/cramfs/uncompress.c should #include <linux/cramfs_fs.h>

2005-09-10 10:06:35 -07:00

debugfs

…

devfs

[PATCH] Fix up symlink function pointers

2005-08-19 18:08:21 -07:00

devpts

[PATCH] Generic VFS fallback for security xattrs

2005-09-05 00:05:52 -07:00

efs

…

exportfs

…

ext2

[PATCH] Fix ext2_new_inode() failure paths

2005-09-28 07:46:40 -07:00

ext3

[PATCH] Fix ext3_new_inode() failure paths

2005-09-28 07:46:40 -07:00

fat

[PATCH] fat: fix adate

2005-09-21 10:12:18 -07:00

freevxfs

[PATCH] fs: convert kcalloc to kzalloc

2005-09-07 16:57:46 -07:00

fuse

[PATCH] fuse: check O_DIRECT

2005-09-30 12:41:18 -07:00

hfs

[PATCH] hfs: NLS support

2005-09-07 16:57:50 -07:00

hfsplus

[PATCH] Fix HFS+ to free up the space when a file is deleted.

2005-10-26 10:39:43 -07:00

hostfs

[PATCH] uml: remove empty hostfs_truncate method

2005-09-30 12:41:18 -07:00

hpfs

[PATCH] update filesystems for new delete_inode behavior

2005-09-09 13:57:27 -07:00

hppfs

[PATCH] hppfs: fix symlink error path

2005-08-26 11:39:19 -07:00

hugetlbfs

…

isofs

Check input buffer size in zisofs

2005-08-06 09:42:06 -07:00

jbd

[PATCH] fs: fix-up schedule_timeout() usage

2005-09-10 10:06:36 -07:00

jffs

[PATCH] janitor: jffs/intrep: list_for_each_entry

2005-09-10 10:06:32 -07:00

jffs2

[PATCH] jffs/jffs2: remove wrong function prototypes

2005-09-07 16:57:29 -07:00

jfs

JFS: don't dereference tlck->ip from txUpdateMap

2005-09-20 14:58:11 -05:00

lockd

[PATCH] fs: fix-up schedule_timeout() usage

2005-09-10 10:06:36 -07:00

minix

[PATCH] update filesystems for new delete_inode behavior

2005-09-09 13:57:27 -07:00

msdos

…

ncpfs

[PATCH] update filesystems for new delete_inode behavior

2005-09-09 13:57:27 -07:00

nfs

[PATCH] NFS: Fix Oopsable/unnecessary i_count manipulations in nfs_wait_on_inode()

2005-10-17 14:47:16 -07:00

nfs_common

[PATCH] nfsacl: Solaris VxFS compatibility fix

2005-10-11 09:46:54 -07:00

nfsd

[PATCH] setting ACLs on readonly mounted NFS filesystems (CVE-2005-3623)

2005-12-26 16:08:59 -08:00

nls

…

ntfs

[PATCH] gfp flags annotations - part 1

2005-10-08 15:00:57 -07:00

openpromfs

…

partitions

…

proc

[PATCH] output of /proc/maps on nommu systems is incomplete

2005-10-17 17:03:57 -07:00

qnx4

[PATCH] update filesystems for new delete_inode behavior

2005-09-09 13:57:27 -07:00

ramfs

…

reiserfs

[PATCH] reiserfs: use mark_inode_dirty instead of reiserfs_update_sd

2005-09-13 08:22:29 -07:00

relayfs

[PATCH] relayfs: fix bogus param value in call to vmap

2005-10-10 08:39:50 -07:00

romfs

…

smbfs

[PATCH] fs: fix-up schedule_timeout() usage

2005-09-10 10:06:36 -07:00

sysfs

[PATCH] Fix oops in sysfs_hash_and_remove_file()

2005-08-26 19:37:13 -07:00

sysv

[PATCH] update filesystems for new delete_inode behavior

2005-09-09 13:57:27 -07:00

udf

[PATCH] update filesystems for new delete_inode behavior

2005-09-09 13:57:27 -07:00

ufs

[PATCH] update filesystems for new delete_inode behavior

2005-09-09 13:57:27 -07:00

vfat

…

xfs

[PATCH] fix XFS_QUOTA for modular XFS

2005-11-10 21:18:54 -08:00

aio.c

[PATCH] aio syscalls are not checked by lsm

2005-10-23 16:38:38 -07:00

attr.c

…

bad_inode.c

…

binfmt_aout.c

…

binfmt_elf_fdpic.c

…

binfmt_elf.c

[PATCH] binfmt_elf bss padding fix

2005-10-11 09:46:54 -07:00

binfmt_em86.c

…

binfmt_flat.c

[PATCH] uclinux: use MAP_PRIVATE when mmaping code regions in flat binary loader

2005-09-02 00:57:31 -07:00

binfmt_misc.c

…

binfmt_script.c

…

binfmt_som.c

…

bio.c

[PATCH] gfp flags annotations - part 1

2005-10-08 15:00:57 -07:00

block_dev.c

…

buffer.c

[PATCH] gfp flags annotations - part 1

2005-10-08 15:00:57 -07:00

char_dev.c

…

compat_ioctl.c

[PATCH] Lost sockfd_put() in routing_ioctl()

2005-09-09 14:24:05 -07:00

compat.c

[COMPAT]: Fixup compat_do_execve()

2005-09-14 21:40:00 -07:00

dcache.c

Make fsnotify possibly work better for the inode removal case

2005-09-19 19:54:29 -07:00

dcookies.c

…

direct-io.c

…

dnotify.c

…

dquot.c

…

eventpoll.c

[PATCH] epoll: handle timeout overflow

2005-09-28 07:46:41 -07:00

exec.c

[PATCH] fix de_thread() vs send_group_sigqueue() race

2005-11-10 21:18:55 -08:00

fcntl.c

[PATCH] files: lock-free fd look-up

2005-09-09 13:57:55 -07:00

fifo.c

…

file_table.c

[PATCH] files: files struct with RCU

2005-09-09 13:57:55 -07:00

file.c

[PATCH] Fix the fdtable freeing in the case of vmalloced fdset/arrays

2005-09-14 12:38:26 -07:00

filesystems.c

…

fs-writeback.c

…

inode.c

[PATCH] move truncate_inode_pages() into ->delete_inode()

2005-09-09 13:57:26 -07:00

inotify.c

[PATCH] inotify/idr leak fix

2005-10-23 16:38:39 -07:00

ioctl.c

…

ioprio.c

Don't allow normal users to set idle IO priority

2005-08-20 18:51:29 -07:00

Kconfig

[PATCH] fuse: add required version info

2005-09-28 07:46:40 -07:00

Kconfig.binfmt

…

libfs.c

…

locks.c

[PATCH] VFS: Fix memory leak with file leases

2005-11-24 14:10:08 -08:00

Makefile

[PATCH] FUSE - MAINTAINERS, Kconfig and Makefile changes

2005-09-09 14:03:44 -07:00

mbcache.c

[PATCH] mbcache: Remove unused mb_cache_shrink parameter

2005-07-27 16:26:07 -07:00

mpage.c

[PATCH] gfp flags annotations - part 1

2005-10-08 15:00:57 -07:00

namei.c

Avoid 'names_cache' memory leak with CONFIG_AUDITSYSCALL

2005-10-06 21:54:21 -07:00

namespace.c

[PATCH] janitor: fs/namespace.c: list_for_each_entry

2005-09-10 10:06:32 -07:00

nfsctl.c

…

open.c

[PATCH] open returns ENFILE but creates file anyway

2005-09-13 08:22:28 -07:00

pipe.c

[PATCH] sched: TASK_NONINTERACTIVE

2005-09-10 10:06:22 -07:00

posix_acl.c

[PATCH] gfp flags annotations - part 1

2005-10-08 15:00:57 -07:00

quota_v1.c

…

quota_v2.c

…

quota.c

…

read_write.c

[PATCH] readv/writev syscalls are not checked by lsm

2005-09-29 15:42:08 -07:00

readdir.c

…

select.c

[PATCH] files: lock-free fd look-up

2005-09-09 13:57:55 -07:00

seq_file.c

…

stat.c

…

super.c

…

xattr_acl.c

…

xattr.c

[PATCH] Fix listxattr() for generic security attributes

2005-12-14 15:42:55 -08:00