Eric W. Biederman 7dc5dbc879 sysfs: Restrict mounting sysfs ... Don't allow mounting sysfs unless the caller has CAP_SYS_ADMIN rights over the net namespace. The principle here is if you create or have capabilities over it you can mount it, otherwise you get to live with what other people have mounted. Instead of testing this with a straight forward ns_capable call, perform this check the long and torturous way with kobject helpers, this keeps direct knowledge of namespaces out of sysfs, and preserves the existing sysfs abstractions. Acked-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>		2013-08-28 21:35:14 -07:00
..
bin.c	hlist: drop the node parameter from iterators	2013-02-27 19:10:24 -08:00
dir.c	Driver core patches for 3.11-rc1	2013-07-02 11:44:19 -07:00
file.c	sysfs_notify is only possible on file attributes	2013-06-07 16:05:50 -07:00
group.c	sysfs: Functions for adding/removing symlinks to/from attribute groups	2013-01-25 21:51:13 +01:00
inode.c	sysfs: kill sysfs_sb declaration in fs/sysfs/inode.c.	2013-05-17 10:26:08 -07:00
Kconfig	kconfig: rename CONFIG_EMBEDDED to CONFIG_EXPERT	2011-01-20 17:02:05 -08:00
Makefile
mount.c	sysfs: Restrict mounting sysfs	2013-08-28 21:35:14 -07:00
symlink.c	sysfs: Functions for adding/removing symlinks to/from attribute groups	2013-01-25 21:51:13 +01:00
sysfs.h	sysfs: Functions for adding/removing symlinks to/from attribute groups	2013-01-25 21:51:13 +01:00