iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
d83f5901bc
linux/fs/coda
History
Eric W. Biederman d83f5901bc coda: Restrict coda messages to the initial user namespace 
Remove the slight chance that uids and gids in coda messages will be
interpreted in the wrong user namespace.

- Only allow processes in the initial user namespace to open the coda
  character device to communicate with coda filesystems.
- Explicitly convert the uids in the coda header into the initial user
  namespace.
- In coda_vattr_to_attr make kuids and kgids from the initial user
  namespace uids and gids in struct coda_vattr that just came from
  userspace.
- In coda_iattr_to_vattr convert kuids and kgids into uids and gids
  in the intial user namespace and store them in struct coda_vattr for
  sending to coda userspace programs.

Nothing needs to be changed with mounts as coda does not support
being mounted in anything other than the initial user namespace.

Cc: Jan Harkes <jaharkes@cs.cmu.edu>
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
2013-02-13 06:00:53 -08:00
..
cache.c coda: use list_for_each_entry 2012-07-14 16:32:56 +04:00
cnode.c coda: switch coda_cnode_make() to sane API as well, clean coda_lookup() 2012-01-10 11:13:16 -05:00
coda_cache.h take coda-private headers out of include/linux 2011-01-12 20:02:48 -05:00
coda_fs_i.h coda: switch coda_cnode_make() to sane API as well, clean coda_lookup() 2012-01-10 11:13:16 -05:00
coda_int.h fs: push i_mutex and filemap_write_and_wait down into ->fsync() handlers 2011-07-20 20:47:59 -04:00
coda_linux.c coda: Restrict coda messages to the initial user namespace 2013-02-13 06:00:53 -08:00
coda_linux.h fs: Convert vmalloc/memset to vzalloc 2011-09-15 13:56:28 +02:00
dir.c don't pass nameidata to ->create() 2012-07-14 16:34:47 +04:00
file.c fs: push i_mutex and filemap_write_and_wait down into ->fsync() handlers 2011-07-20 20:47:59 -04:00
inode.c coda: Restrict coda messages to the initial pid namespace 2013-02-13 06:00:52 -08:00
Kconfig fs/Kconfig: move coda out 2009-01-22 13:16:01 +03:00
Makefile fs: change to new flag variable 2011-03-17 14:02:57 +01:00
pioctl.c ->permission() sanitizing: don't pass flags to ->permission() 2011-07-20 01:43:24 -04:00
psdev.c coda: Restrict coda messages to the initial user namespace 2013-02-13 06:00:53 -08:00
symlink.c take coda-private headers out of include/linux 2011-01-12 20:02:48 -05:00
sysctl.c codafs: fix build break when CONFIG_PROC_SYSCTL=n 2011-03-25 17:45:16 -07:00
upcall.c coda: Restrict coda messages to the initial user namespace 2013-02-13 06:00:53 -08:00