filelocks: use mount idmapping for setlease permission check
authorSeth Forshee <sforshee@kernel.org>
Thu, 9 Mar 2023 20:39:09 +0000 (14:39 -0600)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 17 Mar 2023 07:49:02 +0000 (08:49 +0100)
commit48302ee67dd7960cd97585f48b8d0d99b8e4396a
tree02425e7e7246e74da8fea863d0f1aa4b0a696220
parent513572bb89e8075f5d2a2bb4c89f1152e44da9d8
filelocks: use mount idmapping for setlease permission check

commit 42d0c4bdf753063b6eec55415003184d3ca24f6e upstream.

A user should be allowed to take out a lease via an idmapped mount if
the fsuid matches the mapped uid of the inode. generic_setlease() is
checking the unmapped inode uid, causing these operations to be denied.

Fix this by comparing against the mapped inode uid instead of the
unmapped uid.

Fixes: 9caccd41541a ("fs: introduce MOUNT_ATTR_IDMAP")
Cc: stable@vger.kernel.org
Signed-off-by: Seth Forshee (DigitalOcean) <sforshee@kernel.org>
Signed-off-by: Christian Brauner (Microsoft) <brauner@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/locks.c