From: Jaegeuk Kim <jaegeuk@kernel.org>
Date: Wed, 13 Mar 2019 23:15:08 +0000 (-0700)
Subject: f2fs: set pin_file under CAP_SYS_ADMIN
X-Git-Tag: Ubuntu-5.4-5.4.0-11.14~3300^2
X-Git-Url: https://git.proxmox.com/?a=commitdiff_plain;h=aff7b628ac2d58616b74789389ebb1e987081f49;p=mirror_ubuntu-focal-kernel.git

f2fs: set pin_file under CAP_SYS_ADMIN

Android uses pin_file for uncrypt during OTA, and that should be managed by
CAP_SYS_ADMIN only.

Reviewed-by: Chao Yu <yuchao0@huawei.com>
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
---

diff --git a/fs/f2fs/file.c b/fs/f2fs/file.c
index 807a97ad2430..012815d816e6 100644
--- a/fs/f2fs/file.c
+++ b/fs/f2fs/file.c
@@ -2873,8 +2873,8 @@ static int f2fs_ioc_set_pin_file(struct file *filp, unsigned long arg)
 	__u32 pin;
 	int ret = 0;
 
-	if (!inode_owner_or_capable(inode))
-		return -EACCES;
+	if (!capable(CAP_SYS_ADMIN))
+		return -EPERM;
 
 	if (get_user(pin, (__u32 __user *)arg))
 		return -EFAULT;