Reference in a new issue

Blame

Copy permalink

Reference in a new issue

Copy permalink

Gu Zheng b35e158715 tmpfs: clear S_ISGID when setting posix ACLs ...

commit 497de07d89 upstream.

This change was missed the tmpfs modification in In CVE-2016-7097
commit 073931017b ("posix_acl: Clear SGID bit when setting
file permissions")
It can test by xfstest generic/375, which failed to clear
setgid bit in the following test case on tmpfs:

  touch $testfile
  chown 100:100 $testfile
  chmod 2755 $testfile
  _runas -u 100 -g 101 -- setfacl -m u::rwx,g::rwx,o::rwx $testfile

Signed-off-by: Gu Zheng <guzheng1@huawei.com>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>

2017-02-26 20:01:49 +00:00

935 lines

21 KiB

Raw Permalink Blame History