linux/fs/fuse
Vivek Goyal 3179216135 fuse: setattr should set FATTR_KILL_SUIDGID
If fc->handle_killpriv_v2 is enabled, we expect file server to clear
suid/sgid/security.capbility upon chown/truncate/write as appropriate.

Upon truncate (ATTR_SIZE), suid/sgid are cleared only if caller does not
have CAP_FSETID.  File server does not know whether caller has CAP_FSETID
or not.  Hence set FATTR_KILL_SUIDGID upon truncate to let file server know
that caller does not have CAP_FSETID and it should kill suid/sgid as
appropriate.

On chown (ATTR_UID/ATTR_GID) suid/sgid need to be cleared irrespective of
capabilities of calling process, so set FATTR_KILL_SUIDGID unconditionally
in that case.

Signed-off-by: Vivek Goyal <vgoyal@redhat.com>
Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
2020-11-11 17:22:33 +01:00
..
acl.c fuse: Support fuse filesystems outside of init_user_ns 2018-03-20 17:11:44 +01:00
control.c fuse: split fuse_mount off of fuse_conn 2020-09-18 15:17:41 +02:00
cuse.c fuse: split fuse_mount off of fuse_conn 2020-09-18 15:17:41 +02:00
dax.c fuse: split fuse_mount off of fuse_conn 2020-09-18 15:17:41 +02:00
dev.c fuse: split fuse_mount off of fuse_conn 2020-09-18 15:17:41 +02:00
dir.c fuse: setattr should set FATTR_KILL_SUIDGID 2020-11-11 17:22:33 +01:00
file.c fuse: set FUSE_WRITE_KILL_SUIDGID in cached write path 2020-11-11 17:22:33 +01:00
fuse_i.h fuse: introduce the notion of FUSE_HANDLE_KILLPRIV_V2 2020-11-11 17:22:32 +01:00
inode.c fuse: introduce the notion of FUSE_HANDLE_KILLPRIV_V2 2020-11-11 17:22:32 +01:00
Kconfig virtiofs: implement dax read/write operations 2020-09-10 11:39:23 +02:00
Makefile virtiofs: add a mount option to enable dax 2020-09-10 11:39:22 +02:00
readdir.c fuse: split fuse_mount off of fuse_conn 2020-09-18 15:17:41 +02:00
virtio_fs.c virtiofs: clean up error handling in virtio_fs_get_tree() 2020-11-11 17:22:32 +01:00
xattr.c fuse: split fuse_mount off of fuse_conn 2020-09-18 15:17:41 +02:00