]> git.proxmox.com Git - mirror_ubuntu-jammy-kernel.git/commit
UBUNTU: SAUCE: shiftfs: Correct id translation for lower fs operations
authorSeth Forshee <seth.forshee@canonical.com>
Fri, 1 Nov 2019 18:35:25 +0000 (13:35 -0500)
committerPaolo Pisati <paolo.pisati@canonical.com>
Tue, 2 Nov 2021 07:24:47 +0000 (08:24 +0100)
commitef687aea87e3538eac522f5d8f21c23f98731c45
tree4d1e40c34eba26cf0ff17ff93218f1b3b52c6f7b
parent392d05f6e88106bf09d6ada58ed99c0bcfc8ffc0
UBUNTU: SAUCE: shiftfs: Correct id translation for lower fs operations

BugLink: https://bugs.launchpad.net/bugs/1850867
Several locations which shift ids translate user/group ids before
performing operations in the lower filesystem are translating
them into init_user_ns, whereas they should be translated into
the s_user_ns for the lower filesystem. This will result in using
ids other than the intended ones in the lower fs, which will
likely not map into the shifts s_user_ns.

Change these sites to use shift_k[ug]id() to do a translation
into the s_user_ns of the lower filesystem.

Reported-by: Jann Horn <jannh@google.com>
Signed-off-by: Seth Forshee <seth.forshee@canonical.com>
CVE-2019-15793

Acked-by: Tyler Hicks <tyhicks@canonical.com>
Signed-off-by: Stefan Bader <stefan.bader@canonical.com>
fs/shiftfs.c