UBUNTU: SAUCE: (namespace) fuse: Restrict allow_other to the superblock's namespace...

[mirror_ubuntu-bionic-kernel.git] / fs / fuse / dir.c

diff --git a/fs/fuse/dir.c b/fs/fuse/dir.c
index ad1cfac1942f35d9486be9011d57d4a88f5519a8..d41559a0aa6bda88132b5992ca2b8218e514c2dc 100644 (file)
--- a/fs/fuse/dir.c
+++ b/fs/fuse/dir.c
@@ -1030,7 +1030,7 @@ int fuse_allow_current_process(struct fuse_conn *fc)
        const struct cred *cred;
 
        if (fc->allow_other)
-               return 1;
+               return current_in_userns(fc->user_ns);
 
        cred = current_cred();
        if (uid_eq(cred->euid, fc->user_id) &&