[PATCH 3/4] fs: allow mknod in user namespaces
STALE4952d
From: Glauber Costa <hidden>
Date: 2013-03-15 09:13:42
Also in:
linux-fsdevel
Subsystem:
filesystems (vfs and infrastructure), the rest · Maintainers:
Alexander Viro, Christian Brauner, Linus Torvalds
Possibly related (same subject, not in this thread)
- 2013-03-16 · Re: [PATCH 3/4] fs: allow mknod in user namespaces · Serge Hallyn <hidden>
- 2013-03-15 · Re: [PATCH 3/4] fs: allow mknod in user namespaces · Eric W. Biederman <hidden>
- 2013-03-15 · Re: [PATCH 3/4] fs: allow mknod in user namespaces · Serge Hallyn <hidden>
- 2013-03-15 · Re: [PATCH 3/4] fs: allow mknod in user namespaces · Glauber Costa <hidden>
- 2013-03-15 · Re: [PATCH 3/4] fs: allow mknod in user namespaces · Serge Hallyn <hidden>
Since we have strict control on who access the devices, it should be no problem to allow the device to appear. Signed-off-by: Glauber Costa <redacted> Cc: Aristeu Rozanski <redacted> Cc: Eric Biederman <ebiederm-aS9lmoZGLiVWk0Htik3J/w@public.gmane.org> Cc: Serge Hallyn <redacted> --- fs/namei.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/fs/namei.c b/fs/namei.c
index 8a34d79..d0b4549 100644
--- a/fs/namei.c
+++ b/fs/namei.c@@ -3126,7 +3126,7 @@ int vfs_mknod(struct inode *dir, struct dentry *dentry, umode_t mode, dev_t dev) if (error) return error; - if ((S_ISCHR(mode) || S_ISBLK(mode)) && !capable(CAP_MKNOD)) + if ((S_ISCHR(mode) || S_ISBLK(mode)) && !nsown_capable(CAP_MKNOD)) return -EPERM; if (!dir->i_op->mknod)
--
1.8.1.2