]> git.proxmox.com Git - mirror_ubuntu-hirsute-kernel.git/commit
UBUNTU: SAUCE: shiftfs: Correct id translation for lower fs operations
authorSeth Forshee <seth.forshee@canonical.com>
Fri, 1 Nov 2019 18:35:25 +0000 (13:35 -0500)
committerAndrea Righi <andrea.righi@canonical.com>
Mon, 14 Dec 2020 07:30:43 +0000 (08:30 +0100)
commit67fb86dee402638b11415fabc37146d43ca95fdc
tree3f580653611b66edc3523ce02f84f79b5d9f7c80
parent280cd00fec94fb894bde71af6e59a32266ad15ce
UBUNTU: SAUCE: shiftfs: Correct id translation for lower fs operations

BugLink: https://bugs.launchpad.net/bugs/1850867
Several locations which shift ids translate user/group ids before
performing operations in the lower filesystem are translating
them into init_user_ns, whereas they should be translated into
the s_user_ns for the lower filesystem. This will result in using
ids other than the intended ones in the lower fs, which will
likely not map into the shifts s_user_ns.

Change these sites to use shift_k[ug]id() to do a translation
into the s_user_ns of the lower filesystem.

Reported-by: Jann Horn <jannh@google.com>
Signed-off-by: Seth Forshee <seth.forshee@canonical.com>
CVE-2019-15793

Acked-by: Tyler Hicks <tyhicks@canonical.com>
Signed-off-by: Stefan Bader <stefan.bader@canonical.com>
fs/shiftfs.c