leandrof/linux
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

userns: Check uid_map's opener's fsuid, not the current fsuid

Browse Source 
Signed-off-by: Andy Lutomirski <luto@amacapital.net>
This commit is contained in:
Andy Lutomirski 2013-04-14 16:28:19 -07:00
parent 6708075f10
commit e3211c120a
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
kernel/user_namespace.c
View File

@ -797,12 +797,12 @@ static bool new_idmap_permitted(const struct file *file,
u32 id = new_map->extent[0].lower_first; u32 id = new_map->extent[0].lower_first;
if (cap_setid == CAP_SETUID) { if (cap_setid == CAP_SETUID) {
kuid_t uid = make_kuid(ns->parent, id); kuid_t uid = make_kuid(ns->parent, id);
if (uid_eq(uid, current_fsuid())) if (uid_eq(uid, file->f_cred->fsuid))
return true; return true;
} }
else if (cap_setid == CAP_SETGID) { else if (cap_setid == CAP_SETGID) {
kgid_t gid = make_kgid(ns->parent, id); kgid_t gid = make_kgid(ns->parent, id);
if (gid_eq(gid, current_fsgid())) if (gid_eq(gid, file->f_cred->fsgid))
return true; return true;
} }
} }