Eric W. Biederman
d83f5901bc
coda: Restrict coda messages to the initial user namespace
...
Remove the slight chance that uids and gids in coda messages will be
interpreted in the wrong user namespace.
- Only allow processes in the initial user namespace to open the coda
character device to communicate with coda filesystems.
- Explicitly convert the uids in the coda header into the initial user
namespace.
- In coda_vattr_to_attr make kuids and kgids from the initial user
namespace uids and gids in struct coda_vattr that just came from
userspace.
- In coda_iattr_to_vattr convert kuids and kgids into uids and gids
in the intial user namespace and store them in struct coda_vattr for
sending to coda userspace programs.
Nothing needs to be changed with mounts as coda does not support
being mounted in anything other than the initial user namespace.
Cc: Jan Harkes <jaharkes@cs.cmu.edu >
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com >
2013-02-13 06:00:53 -08:00
..
2012-12-19 12:47:41 -08:00
2012-12-20 14:00:13 -08:00
2012-12-14 14:54:26 -08:00
2012-12-18 16:51:10 -08:00
2012-12-18 12:46:37 -08:00
2012-12-14 14:42:53 -08:00
2012-12-16 18:55:20 -08:00
2012-12-19 11:47:22 -08:00
2012-12-11 11:19:09 -08:00
2012-12-20 10:07:25 -08:00
2012-12-13 19:26:04 -08:00
2012-12-13 19:51:03 +11:00
2012-12-10 12:43:22 +09:00
2012-12-14 14:27:45 -08:00
2012-12-20 14:04:11 -08:00
2012-12-19 12:46:40 -08:00
2012-12-14 10:03:23 -08:00
2012-12-14 13:06:41 +10:30
2012-12-14 09:34:01 -05:00
2012-12-10 15:49:57 -05:00
2012-12-17 11:29:09 -08:00
2012-12-17 17:15:16 -08:00
2012-12-11 17:22:26 -08:00
2012-12-20 20:00:43 -08:00
2012-12-19 07:18:35 -08:00
2012-12-12 17:38:35 -08:00
2012-12-11 11:25:08 -08:00
2013-02-13 06:00:53 -08:00
2012-12-20 18:05:28 -08:00
2012-12-19 07:55:08 -08:00
2012-12-19 07:55:08 -08:00
2012-12-12 17:38:32 -08:00
2012-12-17 15:44:47 -08:00
2012-12-20 13:57:36 -05:00
2012-12-21 20:23:41 +00:00
2012-12-14 09:59:59 -08:00
2012-12-20 12:05:06 +05:30
2012-12-11 09:28:09 +01:00
2012-12-15 15:20:41 -08:00
2012-12-20 14:04:11 -08:00
2012-12-11 13:43:45 +09:00
2012-12-12 08:18:24 -08:00
2012-12-20 18:49:14 -05:00
2012-12-20 22:34:00 +00:00
2012-12-20 22:04:07 +00:00
2012-12-11 13:44:36 -05:00
2012-12-17 17:15:12 -08:00
2012-12-18 15:02:12 -08:00
2012-12-12 16:49:10 +01:00
2012-12-12 21:41:55 +01:00
2012-12-16 15:18:08 -08:00
2012-12-18 15:02:15 -08:00
2012-12-16 15:18:08 -08:00
2012-12-14 13:05:26 +10:30
2012-12-17 17:15:12 -08:00
2012-12-09 00:20:28 -05:00
2012-12-09 00:20:28 -05:00
2012-12-13 14:20:19 -08:00
2012-12-20 17:40:20 -08:00
2012-12-16 15:40:50 -08:00
2012-12-13 15:31:08 -08:00
2012-12-17 13:39:11 -08:00
2012-12-18 15:02:15 -08:00
2012-12-11 17:22:28 -08:00
2012-12-12 17:38:33 -08:00
2012-12-16 15:18:08 -08:00
2012-12-16 15:18:08 -08:00
2012-12-18 10:56:07 -08:00
2012-12-20 18:46:29 -05:00
2012-12-16 15:18:08 -08:00
2012-12-14 13:06:40 +10:30
2012-12-20 18:50:02 -05:00
2012-12-13 12:00:02 -08:00
2012-12-15 15:21:52 -05:00
2012-12-11 17:22:27 -08:00
2012-12-12 17:38:34 -08:00
2012-12-11 17:30:16 +00:00
2012-12-19 16:15:17 +00:00
2012-12-18 09:58:09 -08:00
2012-12-11 17:22:27 -08:00
2012-12-11 17:22:22 -08:00
2012-12-11 17:22:26 -08:00
2012-12-13 12:14:47 -08:00
2012-12-17 17:15:18 -08:00
2012-12-25 16:10:05 -08:00
2012-12-25 16:10:05 -08:00
2012-12-17 20:58:12 -08:00
2012-12-20 18:05:28 -08:00
2012-12-17 17:15:26 -08:00
2012-12-11 12:39:32 +09:00
2012-12-18 15:02:12 -08:00
2012-12-11 14:43:00 +00:00
2012-12-20 18:05:28 -08:00
2012-12-14 13:05:24 +10:30
2012-12-11 17:22:25 -08:00
2012-12-19 18:07:41 -05:00
2012-12-09 00:20:28 -05:00
2012-12-18 15:02:13 -08:00
2012-12-18 15:02:14 -08:00
2012-12-18 15:02:14 -08:00
2012-12-13 12:00:02 -08:00
2012-12-17 17:15:17 -08:00
2012-12-20 18:05:28 -08:00
2012-12-09 00:20:28 -05:00
2012-12-12 15:34:48 +08:00
2012-12-18 15:02:13 -08:00
2012-12-11 17:22:27 -08:00
2012-12-09 00:20:28 -05:00
2013-01-26 22:11:41 -08:00
2012-12-18 15:20:43 +10:30
2012-12-16 15:18:08 -08:00
2012-12-11 14:42:48 +00:00
2012-12-19 22:24:55 +01:00
2012-12-11 17:22:21 -08:00