projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: bfe01a5) | patch
fs: Add a missing permission check to do_umount
authorAndy Lutomirski <luto@amacapital.net>
Wed, 8 Oct 2014 19:32:47 +0000 (12:32 -0700)
committerAndy Lutomirski <luto@amacapital.net>
Wed, 8 Oct 2014 19:32:47 +0000 (12:32 -0700)
commita1480dcc3c706e309a88884723446f2e84fedd5b
treefa2a425b8607586c11127ea35344d893e6a4a4f0tree | snapshot
parentbfe01a5ba2490f299e1d2d5508cbbbadd897bbe9commit | diff
fs: Add a missing permission check to do_umount

Accessing do_remount_sb should require global CAP_SYS_ADMIN, but
only one of the two call sites was appropriately protected.

Fixes CVE-2014-7975.

Signed-off-by: Andy Lutomirski <luto@amacapital.net>
fs/namespace.c diff | blob | history
ep93xx device tree rework repo: git://git.maquefel.me/linux.git