]> git.proxmox.com Git - mirror_ubuntu-zesty-kernel.git/commit
projects / mirror_ubuntu-zesty-kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a6071d8) | patch
UBUNTU: SAUCE: (namespace) fs: Don't remove suid for CAP_FSETID for userns root
authorSeth Forshee <seth.forshee@canonical.com>
Tue, 26 Apr 2016 19:36:28 +0000 (14:36 -0500)
committerTim Gardner <tim.gardner@canonical.com>
Mon, 20 Feb 2017 03:57:58 +0000 (20:57 -0700)
commit01e527498d5fe5ed45ed1d569cacefcf259914be
tree05020f2b471a39c142adbf177a294d62f5dd7a41tree
parenta6071d80497048f45c4d94384358d57ecf173333commit | diff
UBUNTU: SAUCE: (namespace) fs: Don't remove suid for CAP_FSETID for userns root

Expand the check in should_remove_suid() to keep privileges for
CAP_FSETID in s_user_ns rather than init_user_ns.

--EWB Changed from ns_capable(sb->s_user_ns, ) to capable_wrt_inode_uidgid

Signed-off-by: Seth Forshee <seth.forshee@canonical.com>
Acked-by: Serge Hallyn <serge.hallyn@canonical.com>
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
fs/inode.c diff | blob | blame | history
ubuntu-zesty-kernel mirror