Archive-Team
/
zfs
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 103 Wiki Activity

Remove inode_owner_or_capable override for secpolicy (#178) 

This commit fixes a bug whereby owner@ ACL that limits WRITE_DATA
access for the owner of a file was not being properly enforced. The
owner of a file should be prevented from write access in this case,
but being owner of file should still allow the file owner to chmod,
chown, and setacl.

Signed-off-by: Andrew Walker <awalker@ixsystems.com>
This commit is contained in:
Andrew Walker 2023-11-15 06:13:53 -05:00 committed by Ameer Hamza
parent 46e619a2ed
commit 02cfb15a5e
1 changed files with 1 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
module/os/linux/zfs/policy.c
View File

@ -120,10 +120,7 @@ secpolicy_vnode_access2(const cred_t *cr, struct inode *ip, uid_t owner,
return (0);
}
if ((uid == owner) || (uid == 0))
return (0);
if (zpl_inode_owner_or_capable(zfs_init_idmap, ip))
if (uid == 0)
return (0);
#if defined(CONFIG_USER_NS)