]> git.baikalelectronics.ru Git - kernel.git/commit
fs: Add a missing permission check to do_umount
authorAndy Lutomirski <luto@amacapital.net>
Wed, 8 Oct 2014 19:32:47 +0000 (12:32 -0700)
committerAndy Lutomirski <luto@amacapital.net>
Wed, 8 Oct 2014 19:32:47 +0000 (12:32 -0700)
commita83e1732da5302d7ba28030b5814dfa7e86dd4a4
treefa2a425b8607586c11127ea35344d893e6a4a4f0
parentbe9dcc1be30c95baa5473b7d4f2898dfbdaee245
fs: Add a missing permission check to do_umount

Accessing do_remount_sb should require global CAP_SYS_ADMIN, but
only one of the two call sites was appropriately protected.

Fixes CVE-2014-7975.

Signed-off-by: Andy Lutomirski <luto@amacapital.net>
fs/namespace.c