]> git.baikalelectronics.ru Git - kernel.git/commit
eCryptfs: Clear LOOKUP_OPEN flag when creating lower file
authorTyler Hicks <tyhicks@linux.vnet.ibm.com>
Thu, 23 Sep 2010 07:35:04 +0000 (02:35 -0500)
committerTyler Hicks <tyhicks@linux.vnet.ibm.com>
Fri, 29 Oct 2010 15:31:35 +0000 (10:31 -0500)
commit48d71e6c805830d4ad41047a59ed6e32415e253b
tree0997d7430d83a976b5e7ff0e2201032a45ccb759
parent52836de17c63cf726288e7d2f86d34b58226a5e4
eCryptfs: Clear LOOKUP_OPEN flag when creating lower file

eCryptfs was passing the LOOKUP_OPEN flag through to the lower file
system, even though ecryptfs_create() doesn't support the flag. A valid
filp for the lower filesystem could be returned in the nameidata if the
lower file system's create() function supported LOOKUP_OPEN, possibly
resulting in unencrypted writes to the lower file.

However, this is only a potential problem in filesystems (FUSE, NFS,
CIFS, CEPH, 9p) that eCryptfs isn't known to support today.

https://bugs.launchpad.net/ecryptfs/+bug/641703

Reported-by: Kevin Buhr
Cc: stable <stable@kernel.org>
Signed-off-by: Tyler Hicks <tyhicks@linux.vnet.ibm.com>
fs/ecryptfs/inode.c