https://github.com/torvalds/linux
Revision ba63f23d69a3a10e7e527a02702023da68ef8a6d authored by Eric Biggers on 08 September 2016, 21:20:38 UTC, committed by Theodore Ts'o on 10 September 2016, 05:18:57 UTC
Since setting an encryption policy requires writing metadata to the
filesystem, it should be guarded by mnt_want_write/mnt_drop_write.
Otherwise, a user could cause a write to a frozen or readonly
filesystem. This was handled correctly by f2fs but not by ext4. Make
fscrypt_process_policy() handle it rather than relying on the filesystem
to get it right.
Signed-off-by: Eric Biggers <ebiggers@google.com>
Cc: stable@vger.kernel.org # 4.1+; check fs/{ext4,f2fs}
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
Acked-by: Jaegeuk Kim <jaegeuk@kernel.org>
1 parent 002ced4
Tip revision: ba63f23d69a3a10e7e527a02702023da68ef8a6d authored by Eric Biggers on 08 September 2016, 21:20:38 UTC
fscrypto: require write access to mount to set encryption policy
fscrypto: require write access to mount to set encryption policy
Tip revision: ba63f23
| File | Mode | Size |
|---|---|---|
| 6lowpan | ||
| 802 | ||
| 8021q | ||
| 9p | ||
| appletalk | ||
| atm | ||
| ax25 | ||
| batman-adv | ||
| bluetooth | ||
| bridge | ||
| caif | ||
| can | ||
| ceph | ||
| core | ||
| dcb | ||
| dccp | ||
| decnet | ||
| dns_resolver | ||
| dsa | ||
| ethernet | ||
| hsr | ||
| ieee802154 | ||
| ipv4 | ||
| ipv6 | ||
| ipx | ||
| irda | ||
| iucv | ||
| kcm | ||
| key | ||
| l2tp | ||
| l3mdev | ||
| lapb | ||
| llc | ||
| mac80211 | ||
| mac802154 | ||
| mpls | ||
| ncsi | ||
| netfilter | ||
| netlabel | ||
| netlink | ||
| netrom | ||
| nfc | ||
| openvswitch | ||
| packet | ||
| phonet | ||
| qrtr | ||
| rds | ||
| rfkill | ||
| rose | ||
| rxrpc | ||
| sched | ||
| sctp | ||
| sunrpc | ||
| switchdev | ||
| tipc | ||
| unix | ||
| vmw_vsock | ||
| wimax | ||
| wireless | ||
| x25 | ||
| xfrm | ||
| Kconfig | -rw-r--r-- | 13.2 KB |
| Makefile | -rw-r--r-- | 2.3 KB |
| compat.c | -rw-r--r-- | 24.3 KB |
| socket.c | -rw-r--r-- | 79.6 KB |
| sysctl_net.c | -rw-r--r-- | 2.9 KB |
Computing file changes ...
