]> git.baikalelectronics.ru Git - kernel.git/commit
Revert "fs: Allow unprivileged linkat(..., AT_EMPTY_PATH) aka flink"
authorLinus Torvalds <torvalds@linux-foundation.org>
Wed, 28 Aug 2013 16:18:05 +0000 (09:18 -0700)
committerLinus Torvalds <torvalds@linux-foundation.org>
Wed, 28 Aug 2013 16:18:05 +0000 (09:18 -0700)
commitff7a9050e27be940018161f2207fa55d99363e6f
tree37a56fff4bf75d279fd5424f5da6889ac5ecf5d4
parent2bac81db743d06962dee61779039195d0113ff69
Revert "fs: Allow unprivileged linkat(..., AT_EMPTY_PATH) aka flink"

This reverts commit d3c72b8af74b1f9915636c7ddd7b92c85e9685a3.

It wasn't necessarily wrong per se, but we're still busily discussing
the exact details of this all, so I'm going to revert it for now.

It's true that you can already do flink() through /proc and that flink()
isn't new.  But as Brad Spengler points out, some secure environments do
not mount proc, and flink adds a new interface that can avoid path
lookup of the source for those kinds of environments.

We may re-do this (and even mark it for stable backporting back in 3.11
and possibly earlier) once the whole discussion about the interface is done.

Cc: Andy Lutomirski <luto@amacapital.net>
Cc: Al Viro <viro@zeniv.linux.org.uk>
Cc: Oleg Nesterov <oleg@redhat.com>
Cc: Brad Spengler <spender@grsecurity.net>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
fs/namei.c