Thread (1 message) 1 message, 1 author, 2011-02-11

Re: [PATCH] mount.cifs: reacquire CAP_DAC_READ_SEARCH before calling mount(2)

From: Jeff Layton <hidden>
Date: 2011-02-11 12:22:46

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue,  8 Feb 2011 15:02:24 -0500
Jeff Layton [off-list ref] wrote:
It's possible that the user is trying to mount onto a directory to which
he doesn't have execute perms. If that's the case then the mount will
currently fail. Fix this by reenabling CAP_DAC_READ_SEARCH before
calling mount(2). That will ensure that the kernel's permissions check
for this is bypassed.

Reported-by: Erik Logtenberg <redacted>
Signed-off-by: Jeff Layton <redacted>
---
 mount.cifs.c |   10 ++++++++--
 1 files changed, 8 insertions(+), 2 deletions(-)
Merged and should make 4.9 release.

- -- 
Jeff Layton [off-list ref]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)

iEYEARECAAYFAk1VKiAACgkQyP0gxQMdzIAKeACfUNGG8QYwQjzprz4LLSGpdZim
LIAAnAx12aicXHvsjX4y7dLMJwFMuyf/
=t17y
-----END PGP SIGNATURE-----
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help