]> git.baikalelectronics.ru Git - kernel.git/commit
filelocks: use mount idmapping for setlease permission check
authorSeth Forshee <sforshee@kernel.org>
Thu, 9 Mar 2023 20:39:09 +0000 (14:39 -0600)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 17 Mar 2023 07:50:32 +0000 (08:50 +0100)
commit50d0da01bcac711fb8625f83c0ef35d309e53ad6
treef98aaa667b7adb5006e2c5c2b2e71bc46e96c056
parent599a94a5578b3bc0cdb64ace6edb51e488e0a90b
filelocks: use mount idmapping for setlease permission check

commit 56112365bdd5c410326b1fdb48fec83b5bb29fb6 upstream.

A user should be allowed to take out a lease via an idmapped mount if
the fsuid matches the mapped uid of the inode. generic_setlease() is
checking the unmapped inode uid, causing these operations to be denied.

Fix this by comparing against the mapped inode uid instead of the
unmapped uid.

Fixes: efda9290b79c ("fs: introduce MOUNT_ATTR_IDMAP")
Cc: stable@vger.kernel.org
Signed-off-by: Seth Forshee (DigitalOcean) <sforshee@kernel.org>
Signed-off-by: Christian Brauner (Microsoft) <brauner@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/locks.c