Files
kernel_amazon_mt8127-common/include/linux
Andy Lutomirski 4f80c6c182 fs,userns: Change inode_capable to capable_wrt_inode_uidgid
commit 23adbe12ef7d3d4195e80800ab36b37bee28cd03 upstream.

The kernel has no concept of capabilities with respect to inodes; inodes
exist independently of namespaces.  For example, inode_capable(inode,
CAP_LINUX_IMMUTABLE) would be nonsense.

This patch changes inode_capable to check for uid and gid mappings and
renames it to capable_wrt_inode_uidgid, which should make it more
obvious what it does.

Fixes CVE-2014-4014.

Cc: Theodore Ts'o <tytso@mit.edu>
Cc: Serge Hallyn <serge.hallyn@ubuntu.com>
Cc: "Eric W. Biederman" <ebiederm@xmission.com>
Cc: Dave Chinner <david@fromorbit.com>
Signed-off-by: Andy Lutomirski <luto@amacapital.net>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2014-06-16 13:42:52 -07:00
..
2013-05-17 14:31:05 -04:00
2013-07-25 14:07:23 -07:00
2013-12-04 10:56:22 -08:00
2013-05-07 19:46:02 -07:00
2013-12-08 07:29:27 -08:00
2013-05-01 16:36:22 +05:30
2013-07-28 16:30:11 -07:00
2013-05-07 18:38:27 -07:00
2013-04-29 18:28:40 -07:00
2013-10-13 16:08:28 -07:00
2014-04-03 12:01:05 -07:00
2013-07-28 16:30:05 -07:00
2013-04-30 17:04:06 -07:00
2013-04-30 17:04:00 -07:00
2013-10-13 16:08:35 -07:00
2014-04-03 12:01:05 -07:00
2013-07-21 18:21:29 -07:00
2014-01-15 15:28:47 -08:00
2013-05-04 14:47:26 -04:00
2013-04-29 15:54:28 -07:00
2014-02-13 13:47:59 -08:00
2013-04-29 15:54:28 -07:00
2013-04-30 15:50:12 +05:30
2013-08-20 08:43:02 -07:00
2013-07-28 16:29:55 -07:00