projects/linux·commit 437589a7

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace

437589a7 · Linus Torvalds <[email protected]> · 2012-10-02 11:11:09 -07:00

Pull user namespace changes from Eric Biederman:
 "This is a mostly modest set of changes to enable basic user namespace
  support.  This allows the code to code to compile with user namespaces
  enabled and removes the assumption there is only the initial user
  namespace.  Everything is converted except for the most complex of the
  filesystems: autofs4, 9p, afs, ceph, cifs, coda, fuse, gfs2, ncpfs,
  nfs, ocfs2 and xfs as those patches need a bit more review.

  The strategy is to push kuid_t and kgid_t values are far down into
  subsystems and filesystems as reasonable.  Leaving the make_kuid and
  from_kuid operations to happen at the edge of userspace, as the values
  come off the disk, and as the values come in from the network.
  Letting compile type incompatible compile errors (present when user
  namespaces are enabled) guide me to find the issues.

  The most tricky areas have been the places where we had an implicit
  union of uid and gid values and were storing them in an unsigned int.
  Those places were converted into explicit unions.  I made certain to
  handle those places with simple trivial patches.

  Out of that work I discovered we have generic interfaces for storing
  quota by projid.  I had never heard of the project identifiers before.
  Adding full user namespace support for project identifiers accounts
  for most of the code size growth in my git tree.

  Ultimately there will be work to relax privlige checks from
  "capable(FOO)" to "ns_capable(user_ns, FOO)" where it is safe allowing
  root in a user names to do those things that today we only forbid to
  non-root users because it will confuse suid root applications.

  While I was pushing kuid_t and kgid_t changes deep into the audit code
  I made a few other cleanups.  I capitalized on the fact we process
  netlink messages in the context of the message sender.  I removed
  usage of NETLINK_CRED, and started directly using current->tty.

  Some of these patches have also made it into maintainer trees, with no
  problems from identical code from different trees showing up in
  linux-next.

  After reading through all of this code I feel like I might be able to
  win a game of kernel trivial pursuit."

Fix up some fairly trivial conflicts in netfilter uid/git logging code.

* 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace: (107 commits)
  userns: Convert the ufs filesystem to use kuid/kgid where appropriate
  userns: Convert the udf filesystem to use kuid/kgid where appropriate
  userns: Convert ubifs to use kuid/kgid
  userns: Convert squashfs to use kuid/kgid where appropriate
  userns: Convert reiserfs to use kuid and kgid where appropriate
  userns: Convert jfs to use kuid/kgid where appropriate
  userns: Convert jffs2 to use kuid and kgid where appropriate
  userns: Convert hpfs to use kuid and kgid where appropriate
  userns: Convert btrfs to use kuid/kgid where appropriate
  userns: Convert bfs to use kuid/kgid where appropriate
  userns: Convert affs to use kuid/kgid wherwe appropriate
  userns: On alpha modify linux_to_osf_stat to use convert from kuids and kgids
  userns: On ia64 deal with current_uid and current_gid being kuid and kgid
  userns: On ppc convert current_uid from a kuid before printing.
  userns: Convert s390 getting uid and gid system calls to use kuid and kgid
  userns: Convert s390 hypfs to use kuid and kgid where appropriate
  userns: Convert binder ipc to use kuids
  userns: Teach security_path_chown to take kuids and kgids
  userns: Add user namespace support to IMA
  userns: Convert EVM to deal with kuids and kgids in it's hmac computation
  ...
Commit
437589a74b6a590d175f86cf9f7b2efcee7765e7
Parents
68d47a13 · 72235465

Merge commit. Changes below are compared with the first parent: 68d47a13.

Changes

245 files changed · +2474 −1307

FileStatusAddDelContent
arch/alpha/kernel/osf_sys.cmodified+2−2View file
arch/ia64/kernel/mca_drv.cmodified+2−1View file
arch/ia64/kernel/perfmon.cmodified+16−16View file
arch/ia64/kernel/signal.cmodified+2−2View file
arch/powerpc/mm/fault.cmodified+1−1View file
arch/s390/hypfs/inode.cmodified+14−6View file
arch/s390/kernel/compat_linux.cmodified+24−12View file
drivers/base/devtmpfs.cmodified+2−2View file
drivers/block/loop.cmodified+2−2View file
drivers/connector/cn_proc.cmodified+14−4View file
drivers/gpu/drm/drm_fops.cmodified+2−1View file
drivers/gpu/drm/drm_info.cmodified+3−2View file
drivers/gpu/drm/drm_ioctl.cmodified+2−2View file
drivers/infiniband/hw/qib/qib_fs.cmodified+2−2View file
drivers/net/tun.cmodified+32−14View file
drivers/net/wireless/airo.cmodified+28−20View file
drivers/staging/android/binder.cmodified+7−7View file
drivers/tty/tty_audit.cmodified+10−7View file
drivers/usb/gadget/f_fs.cmodified+16−7View file
drivers/usb/gadget/inode.cmodified+2−2View file
drivers/xen/xenfs/super.cmodified+2−1View file
fs/9p/acl.cmodified+4−4View file
fs/adfs/adfs.hmodified+2−2View file
fs/adfs/inode.cmodified+2−2View file
fs/adfs/super.cmodified+13−8View file
fs/affs/affs.hmodified+2−2View file
fs/affs/inode.cmodified+10−10View file
fs/affs/super.cmodified+11−7View file
fs/befs/befs.hmodified+2−2View file
fs/befs/linuxvfs.cmodified+19−8View file
fs/bfs/inode.cmodified+4−4View file
fs/btrfs/acl.cmodified+4−4View file
fs/btrfs/delayed-inode.cmodified+4−4View file
fs/btrfs/inode.cmodified+4−4View file
fs/btrfs/ioctl.cmodified+3−3View file
fs/configfs/inode.cmodified+2−2View file
fs/cramfs/inode.cmodified+2−2View file
fs/debugfs/inode.cmodified+18−8View file
fs/ecryptfs/main.cmodified+3−2View file
fs/ecryptfs/messaging.cmodified+2−3View file
fs/efs/inode.cmodified+2−2View file
fs/exofs/inode.cmodified+4−4View file
fs/ext2/acl.cmodified+22−10View file
fs/ext3/acl.cmodified+22−10View file
fs/ext3/super.cmodified+1−1View file
fs/ext4/acl.cmodified+22−9View file
fs/ext4/super.cmodified+1−1View file
fs/fat/fat.hmodified+2−2View file
fs/fat/file.cmodified+3−3View file
fs/fat/inode.cmodified+12−6View file
fs/freevxfs/vxfs_inode.cmodified+2−2View file
fs/generic_acl.cmodified+2−2View file
fs/gfs2/acl.cmodified+7−7View file
fs/gfs2/quota.cmodified+19−13View file
fs/hfs/hfs_fs.hmodified+2−2View file
fs/hfs/inode.cmodified+2−2View file
fs/hfs/super.cmodified+13−3View file
fs/hfsplus/catalog.cmodified+2−2View file
fs/hfsplus/hfsplus_fs.hmodified+2−2View file
fs/hfsplus/inode.cmodified+4−4View file
fs/hfsplus/options.cmodified+12−3View file
fs/hostfs/hostfs_kern.cmodified+4−4View file
fs/hpfs/hpfs_fn.hmodified+2−2View file
fs/hpfs/inode.cmodified+11−8View file
fs/hpfs/namei.cmodified+4−4View file
fs/hpfs/super.cmodified+11−7View file
fs/hugetlbfs/inode.cmodified+11−5View file
fs/isofs/inode.cmodified+11−6View file
fs/isofs/isofs.hmodified+2−2View file
fs/isofs/rock.cmodified+2−2View file
fs/jffs2/acl.cmodified+22−8View file
fs/jffs2/file.cmodified+4−4View file
fs/jffs2/fs.cmodified+13−11View file
fs/jffs2/os-linux.hmodified+2−2View file
fs/jfs/acl.cmodified+2−2View file
fs/jfs/file.cmodified+2−2View file
fs/jfs/jfs_imap.cmodified+12−10View file
fs/jfs/jfs_incore.hmodified+4−4View file
fs/jfs/super.cmodified+15−7View file
fs/jfs/xattr.cmodified+2−2View file
fs/logfs/inode.cmodified+2−2View file
fs/logfs/readwrite.cmodified+4−4View file
fs/minix/inode.cmodified+8−8View file
fs/namei.cmodified+3−3View file
fs/nfs/nfs3acl.cmodified+2−2View file
fs/nfsd/vfs.cmodified+4−4View file
fs/nilfs2/inode.cmodified+4−4View file
fs/ntfs/inode.cmodified+4−3View file
fs/ntfs/super.cmodified+32−7View file
fs/ntfs/volume.hmodified+3−2View file
fs/ocfs2/acl.cmodified+2−2View file
fs/ocfs2/file.cmodified+2−4View file
fs/ocfs2/quota_global.cmodified+26−17View file
fs/ocfs2/quota_local.cmodified+9−6View file
fs/omfs/inode.cmodified+6−2View file
fs/omfs/omfs.hmodified+2−2View file
fs/open.cmodified+1−1View file
fs/posix_acl.cmodified+15−15View file
fs/proc/base.cmodified+25−2View file
fs/qnx4/inode.cmodified+2−2View file
fs/qnx6/inode.cmodified+2−2View file
fs/quota/Makefilemodified+1−1View file
fs/quota/dquot.cmodified+57−57View file
fs/quota/kqid.cadded+132−0View file
fs/quota/netlink.cmodified+6−4View file
fs/quota/quota.cmodified+22−6View file
fs/quota/quota_tree.cmodified+13−9View file
fs/quota/quota_v1.cmodified+7−5View file
fs/quota/quota_v2.cmodified+15−11View file
fs/reiserfs/inode.cmodified+13−13View file
fs/reiserfs/xattr_acl.cmodified+19−5View file
fs/seq_file.cmodified+4−0View file
fs/squashfs/inode.cmodified+6−2View file
fs/sysv/inode.cmodified+4−4View file
fs/ubifs/budget.cmodified+2−2View file
fs/ubifs/debug.cmodified+2−2View file
fs/ubifs/journal.cmodified+2−2View file
fs/ubifs/sb.cmodified+2−2View file
fs/ubifs/super.cmodified+2−2View file
fs/ubifs/ubifs.hmodified+2−2View file
fs/udf/inode.cmodified+6−6View file
fs/udf/super.cmodified+12−8View file
fs/udf/udf_sb.hmodified+2−2View file
fs/ufs/inode.cmodified+8−8View file
fs/xattr.cmodified+7−0View file
fs/xattr_acl.cmodified+89−7View file
fs/xfs/xfs_acl.cmodified+2−2View file
fs/xfs/xfs_quotaops.cmodified+6−6View file
fs/xfs/xfs_trans_dquot.cmodified+5−3View file
include/drm/drmP.hmodified+2−2View file
include/linux/audit.hmodified+7−5View file
include/linux/inet_diag.hmodified+1−0View file
include/linux/init_task.hmodified+1−1View file
include/linux/ipc.hmodified+5−4View file
include/linux/key.hmodified+5−4View file
include/linux/loop.hmodified+1−1View file
include/linux/netlink.hmodified+1−0View file
include/linux/posix_acl.hmodified+7−1View file
include/linux/posix_acl_xattr.hmodified+16−2View file
include/linux/projid.hadded+104−0View file
include/linux/quota.hmodified+130−6View file
include/linux/quotaops.hmodified+3−3View file
include/linux/sched.hmodified+1−1View file
include/linux/security.hmodified+3−3View file
include/linux/seq_file.hmodified+14−0View file
include/linux/tsacct_kern.hmodified+6−2View file
include/linux/tty.hmodified+2−2View file
include/linux/user_namespace.hmodified+3−0View file
include/net/ax25.hmodified+2−2View file
include/net/ipv6.hmodified+4−1View file
include/net/netlabel.hmodified+1−1View file
include/net/netns/ipv4.hmodified+2−1View file
include/net/sch_generic.hmodified+2−1View file
include/net/sock.hmodified+10−1View file
include/net/tcp.hmodified+2−1View file
include/net/xfrm.hmodified+12−11View file
init/Kconfigmodified+0−89View file
ipc/msg.cmodified+9−5View file
ipc/sem.cmodified+8−5View file
ipc/shm.cmodified+11−8View file
ipc/util.cmodified+21−14View file
ipc/util.hmodified+1−1View file
kernel/acct.cmodified+2−2View file
kernel/audit.cmodified+48−73View file
kernel/audit.hmodified+3−1View file
kernel/audit_watch.cmodified+1−1View file
kernel/auditfilter.cmodified+118−19View file
kernel/auditsc.cmodified+112−107View file
kernel/cred.cmodified+8−2View file
kernel/pid.cmodified+1−0View file
kernel/pid_namespace.cmodified+2−0View file
kernel/taskstats.cmodified+17−6View file
kernel/trace/trace.cmodified+2−1View file
kernel/trace/trace.hmodified+1−1View file
kernel/tsacct.cmodified+7−5View file
kernel/user.cmodified+8−0View file
kernel/user_namespace.cmodified+127−1View file
net/appletalk/atalk_proc.cmodified+2−1View file
net/ax25/ax25_uid.cmodified+14−7View file
net/core/dev.cmodified+5−4View file
net/core/scm.cmodified+23−8View file
net/core/sock.cmodified+5−5View file
net/dns_resolver/dns_key.cmodified+2−1View file
net/ipv4/inet_diag.cmodified+15−6View file
net/ipv4/ping.cmodified+9−13View file
net/ipv4/raw.cmodified+3−1View file
net/ipv4/sysctl_net_ipv4.cmodified+27−15View file
net/ipv4/tcp_ipv4.cmodified+3−3View file
net/ipv4/udp.cmodified+3−1View file
net/ipv4/udp_diag.cmodified+4−1View file
net/ipv6/ip6_flowlabel.cmodified+40−7View file
net/ipv6/raw.cmodified+2−1View file
net/ipv6/tcp_ipv6.cmodified+3−3View file
net/ipv6/udp.cmodified+2−1View file
net/ipx/ipx_proc.cmodified+2−1View file
net/key/af_key.cmodified+1−1View file
net/llc/llc_proc.cmodified+1−1View file
net/netfilter/nfnetlink_log.cmodified+9−4View file
net/netfilter/xt_LOG.cmodified+5−3View file
net/netfilter/xt_owner.cmodified+24−6View file
net/netfilter/xt_recent.cmodified+11−2View file
net/netlabel/netlabel_unlabeled.cmodified+1−1View file
net/netlabel/netlabel_user.cmodified+1−1View file
net/netlink/af_netlink.cmodified+4−2View file
net/packet/af_packet.cmodified+1−1View file
net/phonet/socket.cmodified+4−2View file
net/rxrpc/ar-key.cmodified+4−2View file
net/sched/cls_api.cmodified+1−1View file
net/sched/cls_basic.cmodified+2−1View file
net/sched/cls_cgroup.cmodified+2−1View file
net/sched/cls_flow.cmodified+14−5View file
net/sched/cls_fw.cmodified+2−1View file
net/sched/cls_route.cmodified+2−1View file
net/sched/cls_rsvp.hmodified+2−1View file
net/sched/cls_tcindex.cmodified+2−1View file
net/sched/cls_u32.cmodified+2−1View file
net/sctp/proc.cmodified+4−2View file
net/xfrm/xfrm_policy.cmodified+4−4View file
net/xfrm/xfrm_state.cmodified+3−3View file
net/xfrm/xfrm_user.cmodified+6−6View file
security/apparmor/domain.cmodified+2−2View file
security/apparmor/file.cmodified+7−5View file
security/apparmor/include/audit.hmodified+1−1View file
security/apparmor/include/file.hmodified+2−2View file
security/apparmor/lsm.cmodified+1−1View file
security/capability.cmodified+1−1View file
security/integrity/evm/evm_crypto.cmodified+2−2View file
security/integrity/ima/ima_audit.cmodified+3−2View file
security/integrity/ima/ima_policy.cmodified+7−7View file
security/keys/internal.hmodified+2−4View file
security/keys/key.cmodified+8−15View file
security/keys/keyctl.cmodified+30−20View file
security/keys/keyring.cmodified+2−2View file
security/keys/permission.cmodified+4−10View file
security/keys/proc.cmodified+22−22View file
security/keys/process_keys.cmodified+8−7View file
security/keys/request_key.cmodified+3−3View file
security/security.cmodified+1−1View file
security/selinux/selinuxfs.cmodified+3−3View file
security/selinux/ss/services.cmodified+1−1View file
security/tomoyo/audit.cmodified+16−7View file
security/tomoyo/common.cmodified+3−1View file
security/tomoyo/common.hmodified+2−2View file
security/tomoyo/condition.cmodified+10−10View file
security/tomoyo/tomoyo.cmodified+7−5View file

Only the first 600 diff lines are shown. Download the complete patch.

arch/alpha/kernel/osf_sys.c

View file
diff --git a/arch/alpha/kernel/osf_sys.c b/arch/alpha/kernel/osf_sys.c
index bc1acdd..9503a4b 100644
--- a/arch/alpha/kernel/osf_sys.c
+++ b/arch/alpha/kernel/osf_sys.c
@@ -278,8 +278,8 @@ linux_to_osf_stat(struct kstat *lstat, struct osf_stat __user *osf_stat)
tmp.st_dev = lstat->dev;
tmp.st_mode = lstat->mode;
tmp.st_nlink = lstat->nlink;
- tmp.st_uid = lstat->uid;
- tmp.st_gid = lstat->gid;
+ tmp.st_uid = from_kuid_munged(current_user_ns(), lstat->uid);
+ tmp.st_gid = from_kgid_munged(current_user_ns(), lstat->gid);
tmp.st_rdev = lstat->rdev;
tmp.st_ldev = lstat->rdev;
tmp.st_size = lstat->size;

arch/ia64/kernel/mca_drv.c

View file
diff --git a/arch/ia64/kernel/mca_drv.c b/arch/ia64/kernel/mca_drv.c
index 1c2e894..9392e02 100644
--- a/arch/ia64/kernel/mca_drv.c
+++ b/arch/ia64/kernel/mca_drv.c
@@ -158,7 +158,8 @@ mca_handler_bh(unsigned long paddr, void *iip, unsigned long ipsr)
ia64_mlogbuf_dump();
printk(KERN_ERR "OS_MCA: process [cpu %d, pid: %d, uid: %d, "
"iip: %p, psr: 0x%lx,paddr: 0x%lx](%s) encounters MCA.\n",
- raw_smp_processor_id(), current->pid, current_uid(),
+ raw_smp_processor_id(), current->pid,
+ from_kuid(&init_user_ns, current_uid()),
iip, ipsr, paddr, current->comm);
spin_lock(&mca_bh_lock);

arch/ia64/kernel/perfmon.c

View file
diff --git a/arch/ia64/kernel/perfmon.c b/arch/ia64/kernel/perfmon.c
index 3fa4bc5..5a5c222 100644
--- a/arch/ia64/kernel/perfmon.c
+++ b/arch/ia64/kernel/perfmon.c
@@ -2380,8 +2380,8 @@ static int
pfm_bad_permissions(struct task_struct *task)
{
const struct cred *tcred;
- uid_t uid = current_uid();
- gid_t gid = current_gid();
+ kuid_t uid = current_uid();
+ kgid_t gid = current_gid();
int ret;
rcu_read_lock();
@@ -2389,20 +2389,20 @@ pfm_bad_permissions(struct task_struct *task)
/* inspired by ptrace_attach() */
DPRINT(("cur: uid=%d gid=%d task: euid=%d suid=%d uid=%d egid=%d sgid=%d\n",
- uid,
- gid,
- tcred->euid,
- tcred->suid,
- tcred->uid,
- tcred->egid,
- tcred->sgid));
-
- ret = ((uid != tcred->euid)
- || (uid != tcred->suid)
- || (uid != tcred->uid)
- || (gid != tcred->egid)
- || (gid != tcred->sgid)
- || (gid != tcred->gid)) && !capable(CAP_SYS_PTRACE);
+ from_kuid(&init_user_ns, uid),
+ from_kgid(&init_user_ns, gid),
+ from_kuid(&init_user_ns, tcred->euid),
+ from_kuid(&init_user_ns, tcred->suid),
+ from_kuid(&init_user_ns, tcred->uid),
+ from_kgid(&init_user_ns, tcred->egid),
+ from_kgid(&init_user_ns, tcred->sgid)));
+
+ ret = ((!uid_eq(uid, tcred->euid))
+ || (!uid_eq(uid, tcred->suid))
+ || (!uid_eq(uid, tcred->uid))
+ || (!gid_eq(gid, tcred->egid))
+ || (!gid_eq(gid, tcred->sgid))
+ || (!gid_eq(gid, tcred->gid))) && !capable(CAP_SYS_PTRACE);
rcu_read_unlock();
return ret;

arch/ia64/kernel/signal.c

View file
diff --git a/arch/ia64/kernel/signal.c b/arch/ia64/kernel/signal.c
index a199be1..37dd795 100644
--- a/arch/ia64/kernel/signal.c
+++ b/arch/ia64/kernel/signal.c
@@ -220,7 +220,7 @@ ia64_rt_sigreturn (struct sigscratch *scr)
si.si_errno = 0;
si.si_code = SI_KERNEL;
si.si_pid = task_pid_vnr(current);
- si.si_uid = current_uid();
+ si.si_uid = from_kuid_munged(current_user_ns(), current_uid());
si.si_addr = sc;
force_sig_info(SIGSEGV, &si, current);
return retval;
@@ -317,7 +317,7 @@ force_sigsegv_info (int sig, void __user *addr)
si.si_errno = 0;
si.si_code = SI_KERNEL;
si.si_pid = task_pid_vnr(current);
- si.si_uid = current_uid();
+ si.si_uid = from_kuid_munged(current_user_ns(), current_uid());
si.si_addr = addr;
force_sig_info(SIGSEGV, &si, current);
return 0;

arch/powerpc/mm/fault.c

View file
diff --git a/arch/powerpc/mm/fault.c b/arch/powerpc/mm/fault.c
index 08ffcf5..e5f028b 100644
--- a/arch/powerpc/mm/fault.c
+++ b/arch/powerpc/mm/fault.c
@@ -470,7 +470,7 @@ bad_area_nosemaphore:
if (is_exec && (error_code & DSISR_PROTFAULT))
printk_ratelimited(KERN_CRIT "kernel tried to execute NX-protected"
" page (%lx) - exploit attempt? (uid: %d)\n",
- address, current_uid());
+ address, from_kuid(&init_user_ns, current_uid()));
return SIGSEGV;

arch/s390/hypfs/inode.c

View file
diff --git a/arch/s390/hypfs/inode.c b/arch/s390/hypfs/inode.c
index 6767b43..124ec1a 100644
--- a/arch/s390/hypfs/inode.c
+++ b/arch/s390/hypfs/inode.c
@@ -31,8 +31,8 @@ static struct dentry *hypfs_create_update_file(struct super_block *sb,
struct dentry *dir);
struct hypfs_sb_info {
- uid_t uid; /* uid used for files and dirs */
- gid_t gid; /* gid used for files and dirs */
+ kuid_t uid; /* uid used for files and dirs */
+ kgid_t gid; /* gid used for files and dirs */
struct dentry *update_file; /* file to trigger update */
time_t last_update; /* last update time in secs since 1970 */
struct mutex lock; /* lock to protect update process */
@@ -229,6 +229,8 @@ static int hypfs_parse_options(char *options, struct super_block *sb)
{
char *str;
substring_t args[MAX_OPT_ARGS];
+ kuid_t uid;
+ kgid_t gid;
if (!options)
return 0;
@@ -243,12 +245,18 @@ static int hypfs_parse_options(char *options, struct super_block *sb)
case opt_uid:
if (match_int(&args[0], &option))
return -EINVAL;
- hypfs_info->uid = option;
+ uid = make_kuid(current_user_ns(), option);
+ if (!uid_valid(uid))
+ return -EINVAL;
+ hypfs_info->uid = uid;
break;
case opt_gid:
if (match_int(&args[0], &option))
return -EINVAL;
- hypfs_info->gid = option;
+ gid = make_kgid(current_user_ns(), option);
+ if (!gid_valid(gid))
+ return -EINVAL;
+ hypfs_info->gid = gid;
break;
case opt_err:
default:
@@ -263,8 +271,8 @@ static int hypfs_show_options(struct seq_file *s, struct dentry *root)
{
struct hypfs_sb_info *hypfs_info = root->d_sb->s_fs_info;
- seq_printf(s, ",uid=%u", hypfs_info->uid);
- seq_printf(s, ",gid=%u", hypfs_info->gid);
+ seq_printf(s, ",uid=%u", from_kuid_munged(&init_user_ns, hypfs_info->uid));
+ seq_printf(s, ",gid=%u", from_kgid_munged(&init_user_ns, hypfs_info->gid));
return 0;
}

arch/s390/kernel/compat_linux.c

View file
diff --git a/arch/s390/kernel/compat_linux.c b/arch/s390/kernel/compat_linux.c
index f606d93..189963c 100644
--- a/arch/s390/kernel/compat_linux.c
+++ b/arch/s390/kernel/compat_linux.c
@@ -131,13 +131,19 @@ asmlinkage long sys32_setresuid16(u16 ruid, u16 euid, u16 suid)
low2highuid(suid));
}
-asmlinkage long sys32_getresuid16(u16 __user *ruid, u16 __user *euid, u16 __user *suid)
+asmlinkage long sys32_getresuid16(u16 __user *ruidp, u16 __user *euidp, u16 __user *suidp)
{
+ const struct cred *cred = current_cred();
int retval;
+ u16 ruid, euid, suid;
- if (!(retval = put_user(high2lowuid(current->cred->uid), ruid)) &&
- !(retval = put_user(high2lowuid(current->cred->euid), euid)))
- retval = put_user(high2lowuid(current->cred->suid), suid);
+ ruid = high2lowuid(from_kuid_munged(cred->user_ns, cred->uid));
+ euid = high2lowuid(from_kuid_munged(cred->user_ns, cred->euid));
+ suid = high2lowuid(from_kuid_munged(cred->user_ns, cred->suid));
+
+ if (!(retval = put_user(ruid, ruidp)) &&
+ !(retval = put_user(euid, euidp)))
+ retval = put_user(suid, suidp);
return retval;
}
@@ -148,13 +154,19 @@ asmlinkage long sys32_setresgid16(u16 rgid, u16 egid, u16 sgid)
low2highgid(sgid));
}
-asmlinkage long sys32_getresgid16(u16 __user *rgid, u16 __user *egid, u16 __user *sgid)
+asmlinkage long sys32_getresgid16(u16 __user *rgidp, u16 __user *egidp, u16 __user *sgidp)
{
+ const struct cred *cred = current_cred();
int retval;
+ u16 rgid, egid, sgid;
+
+ rgid = high2lowgid(from_kgid_munged(cred->user_ns, cred->gid));
+ egid = high2lowgid(from_kgid_munged(cred->user_ns, cred->egid));
+ sgid = high2lowgid(from_kgid_munged(cred->user_ns, cred->sgid));
- if (!(retval = put_user(high2lowgid(current->cred->gid), rgid)) &&
- !(retval = put_user(high2lowgid(current->cred->egid), egid)))
- retval = put_user(high2lowgid(current->cred->sgid), sgid);
+ if (!(retval = put_user(rgid, rgidp)) &&
+ !(retval = put_user(egid, egidp)))
+ retval = put_user(sgid, sgidp);
return retval;
}
@@ -258,22 +270,22 @@ asmlinkage long sys32_setgroups16(int gidsetsize, u16 __user *grouplist)
asmlinkage long sys32_getuid16(void)
{
- return high2lowuid(current->cred->uid);
+ return high2lowuid(from_kuid_munged(current_user_ns(), current_uid()));
}
asmlinkage long sys32_geteuid16(void)
{
- return high2lowuid(current->cred->euid);
+ return high2lowuid(from_kuid_munged(current_user_ns(), current_euid()));
}
asmlinkage long sys32_getgid16(void)
{
- return high2lowgid(current->cred->gid);
+ return high2lowgid(from_kgid_munged(current_user_ns(), current_gid()));
}
asmlinkage long sys32_getegid16(void)
{
- return high2lowgid(current->cred->egid);
+ return high2lowgid(from_kgid_munged(current_user_ns(), current_egid()));
}
/*

drivers/base/devtmpfs.c

View file
diff --git a/drivers/base/devtmpfs.c b/drivers/base/devtmpfs.c
index deb4a45..147d1a4 100644
--- a/drivers/base/devtmpfs.c
+++ b/drivers/base/devtmpfs.c
@@ -309,8 +309,8 @@ static int handle_remove(const char *nodename, struct device *dev)
* before unlinking this node, reset permissions
* of possible references like hardlinks
*/
- newattrs.ia_uid = 0;
- newattrs.ia_gid = 0;
+ newattrs.ia_uid = GLOBAL_ROOT_UID;
+ newattrs.ia_gid = GLOBAL_ROOT_GID;
newattrs.ia_mode = stat.mode & ~0777;
newattrs.ia_valid =
ATTR_UID|ATTR_GID|ATTR_MODE;

drivers/block/loop.c

View file
diff --git a/drivers/block/loop.c b/drivers/block/loop.c
index 3bba655..e9d594f 100644
--- a/drivers/block/loop.c
+++ b/drivers/block/loop.c
@@ -1038,10 +1038,10 @@ loop_set_status(struct loop_device *lo, const struct loop_info64 *info)
{
int err;
struct loop_func_table *xfer;
- uid_t uid = current_uid();
+ kuid_t uid = current_uid();
if (lo->lo_encrypt_key_size &&
- lo->lo_key_owner != uid &&
+ !uid_eq(lo->lo_key_owner, uid) &&
!capable(CAP_SYS_ADMIN))
return -EPERM;
if (lo->lo_state != Lo_bound)

drivers/connector/cn_proc.c

View file
diff --git a/drivers/connector/cn_proc.c b/drivers/connector/cn_proc.c
index 3e92b7d..fce2000 100644
--- a/drivers/connector/cn_proc.c
+++ b/drivers/connector/cn_proc.c
@@ -30,6 +30,7 @@
#include <linux/gfp.h>
#include <linux/ptrace.h>
#include <linux/atomic.h>
+#include <linux/pid_namespace.h>
#include <asm/unaligned.h>
@@ -127,11 +128,11 @@ void proc_id_connector(struct task_struct *task, int which_id)
rcu_read_lock();
cred = __task_cred(task);
if (which_id == PROC_EVENT_UID) {
- ev->event_data.id.r.ruid = cred->uid;
- ev->event_data.id.e.euid = cred->euid;
+ ev->event_data.id.r.ruid = from_kuid_munged(&init_user_ns, cred->uid);
+ ev->event_data.id.e.euid = from_kuid_munged(&init_user_ns, cred->euid);
} else if (which_id == PROC_EVENT_GID) {
- ev->event_data.id.r.rgid = cred->gid;
- ev->event_data.id.e.egid = cred->egid;
+ ev->event_data.id.r.rgid = from_kgid_munged(&init_user_ns, cred->gid);
+ ev->event_data.id.e.egid = from_kgid_munged(&init_user_ns, cred->egid);
} else {
rcu_read_unlock();
return;
@@ -303,6 +304,15 @@ static void cn_proc_mcast_ctl(struct cn_msg *msg,
if (msg->len != sizeof(*mc_op))
return;
+ /*
+ * Events are reported with respect to the initial pid
+ * and user namespaces so ignore requestors from
+ * other namespaces.
+ */
+ if ((current_user_ns() != &init_user_ns) ||
+ (task_active_pid_ns(current) != &init_pid_ns))
+ return;
+
mc_op = (enum proc_cn_mcast_op *)msg->data;
switch (*mc_op) {
case PROC_CN_MCAST_LISTEN:

drivers/gpu/drm/drm_fops.c

View file
diff --git a/drivers/gpu/drm/drm_fops.c b/drivers/gpu/drm/drm_fops.c
index 5062eec..433d2fa 100644
--- a/drivers/gpu/drm/drm_fops.c
+++ b/drivers/gpu/drm/drm_fops.c
@@ -251,7 +251,7 @@ static int drm_open_helper(struct inode *inode, struct file *filp,
filp->private_data = priv;
priv->filp = filp;
priv->uid = current_euid();
- priv->pid = task_pid_nr(current);
+ priv->pid = get_pid(task_pid(current));
priv->minor = idr_find(&drm_minors_idr, minor_id);
priv->ioctl_count = 0;
/* for compatibility root is always authenticated */
@@ -524,6 +524,7 @@ int drm_release(struct inode *inode, struct file *filp)
if (drm_core_check_feature(dev, DRIVER_PRIME))
drm_prime_destroy_file_private(&file_priv->prime);
+ put_pid(file_priv->pid);
kfree(file_priv);
/* ========================================================

drivers/gpu/drm/drm_info.c

View file
diff --git a/drivers/gpu/drm/drm_info.c b/drivers/gpu/drm/drm_info.c
index 8928edb..eb0af39 100644
--- a/drivers/gpu/drm/drm_info.c
+++ b/drivers/gpu/drm/drm_info.c
@@ -191,8 +191,9 @@ int drm_clients_info(struct seq_file *m, void *data)
seq_printf(m, "%c %3d %5d %5d %10u %10lu\n",
priv->authenticated ? 'y' : 'n',
priv->minor->index,
- priv->pid,
- priv->uid, priv->magic, priv->ioctl_count);
+ pid_vnr(priv->pid),
+ from_kuid_munged(seq_user_ns(m), priv->uid),
+ priv->magic, priv->ioctl_count);
}
mutex_unlock(&dev->struct_mutex);
return 0;

drivers/gpu/drm/drm_ioctl.c

View file
diff --git a/drivers/gpu/drm/drm_ioctl.c b/drivers/gpu/drm/drm_ioctl.c
index 64a62c6..39a4383 100644
--- a/drivers/gpu/drm/drm_ioctl.c
+++ b/drivers/gpu/drm/drm_ioctl.c
@@ -215,8 +215,8 @@ int drm_getclient(struct drm_device *dev, void *data,
list_for_each_entry(pt, &dev->filelist, lhead) {
if (i++ >= idx) {
client->auth = pt->authenticated;
- client->pid = pt->pid;
- client->uid = pt->uid;
+ client->pid = pid_vnr(pt->pid);
+ client->uid = from_kuid_munged(current_user_ns(), pt->uid);
client->magic = pt->magic;
client->iocs = pt->ioctl_count;
mutex_unlock(&dev->struct_mutex);

drivers/infiniband/hw/qib/qib_fs.c

View file
diff --git a/drivers/infiniband/hw/qib/qib_fs.c b/drivers/infiniband/hw/qib/qib_fs.c
index cff8a6c..65a2a23 100644
--- a/drivers/infiniband/hw/qib/qib_fs.c
+++ b/drivers/infiniband/hw/qib/qib_fs.c
@@ -61,8 +61,8 @@ static int qibfs_mknod(struct inode *dir, struct dentry *dentry,
inode->i_ino = get_next_ino();
inode->i_mode = mode;
- inode->i_uid = 0;
- inode->i_gid = 0;
+ inode->i_uid = GLOBAL_ROOT_UID;
+ inode->i_gid = GLOBAL_ROOT_GID;
inode->i_blocks = 0;
inode->i_atime = CURRENT_TIME;
inode->i_mtime = inode->i_atime;

drivers/net/tun.c

View file
diff --git a/drivers/net/tun.c b/drivers/net/tun.c
index 9336b82..0873cdc 100644
--- a/drivers/net/tun.c
+++ b/drivers/net/tun.c
@@ -121,8 +121,8 @@ struct tun_sock;
struct tun_struct {
struct tun_file *tfile;
unsigned int flags;
- uid_t owner;
- gid_t group;
+ kuid_t owner;
+ kgid_t group;
struct net_device *dev;
netdev_features_t set_features;
@@ -1032,8 +1032,8 @@ static void tun_setup(struct net_device *dev)
{
struct tun_struct *tun = netdev_priv(dev);
- tun->owner = -1;
- tun->group = -1;
+ tun->owner = INVALID_UID;
+ tun->group = INVALID_GID;
dev->ethtool_ops = &tun_ethtool_ops;
dev->destructor = tun_free_netdev;
@@ -1156,14 +1156,20 @@ static ssize_t tun_show_owner(struct device *dev, struct device_attribute *attr,
char *buf)
{
struct tun_struct *tun = netdev_priv(to_net_dev(dev));
- return sprintf(buf, "%d\n", tun->owner);
+ return uid_valid(tun->owner)?
+ sprintf(buf, "%u\n",
+ from_kuid_munged(current_user_ns(), tun->owner)):
+ sprintf(buf, "-1\n");
}
static ssize_t tun_show_group(struct device *dev, struct device_attribute *attr,
char *buf)
{
struct tun_struct *tun = netdev_priv(to_net_dev(dev));
- return sprintf(buf, "%d\n", tun->group);
+ return gid_valid(tun->group) ?
+ sprintf(buf, "%u\n",
+ from_kgid_munged(current_user_ns(), tun->group)):
+ sprintf(buf, "-1\n");
}
static DEVICE_ATTR(tun_flags, 0444, tun_show_flags, NULL);
@@ -1190,8 +1196,8 @@ static int tun_set_iff(struct net *net, struct file *file, struct ifreq *ifr)
else
return -EINVAL;
- if (((tun->owner != -1 && cred->euid != tun->owner) ||
- (tun->group != -1 && !in_egroup_p(tun->group))) &&
+ if (((uid_valid(tun->owner) && !uid_eq(cred->euid, tun->owner)) ||
+ (gid_valid(tun->group) && !in_egroup_p(tun->group))) &&
!capable(CAP_NET_ADMIN))
return -EPERM;
err = security_tun_dev_attach(tun->socket.sk);
@@ -1375,6 +1381,8 @@ static long __tun_chr_ioctl(struct file *file, unsigned int cmd,
void __user* argp = (void __user*)arg;
struct sock_fprog fprog;
struct ifreq ifr;
+ kuid_t owner;
+ kgid_t group;
int sndbuf;
int vnet_hdr_sz;
int ret;
@@ -1448,16 +1456,26 @@ static long __tun_chr_ioctl(struct file *file, unsigned int cmd,
case TUNSETOWNER:
/* Set owner of the device */
- tun->owner = (uid_t) arg;
-
- tun_debug(KERN_INFO, tun, "owner set to %d\n", tun->owner);
+ owner = make_kuid(current_user_ns(), arg);
+ if (!uid_valid(owner)) {
+ ret = -EINVAL;
+ break;
+ }
+ tun->owner = owner;
+ tun_debug(KERN_INFO, tun, "owner set to %d\n",
+ from_kuid(&init_user_ns, tun->owner));
break;
case TUNSETGROUP:
/* Set group of the device */
- tun->group= (gid_t) arg;
-
- tun_debug(KERN_INFO, tun, "group set to %d\n", tun->group);
+ group = make_kgid(current_user_ns(), arg);
+ if (!gid_valid(group)) {
+ ret = -EINVAL;
+ break;
+ }
+ tun->group = group;
+ tun_debug(KERN_INFO, tun, "group set to %d\n",
+ from_kgid(&init_user_ns, tun->group));
break;
case TUNSETLINK:

drivers/net/wireless/airo.c

View file
diff --git a/drivers/net/wireless/airo.c b/drivers/net/wireless/airo.c
index f9f15bb..c586f78 100644
--- a/drivers/net/wireless/airo.c
+++ b/drivers/net/wireless/airo.c
@@ -232,8 +232,10 @@ static int adhoc;
static int probe = 1;
+static kuid_t proc_kuid;
static int proc_uid /* = 0 */;
+static kgid_t proc_kgid;
static int proc_gid /* = 0 */;
static int airo_perm = 0555;
@@ -4499,78 +4501,79 @@ struct proc_data {
static int setup_proc_entry( struct net_device *dev,
struct airo_info *apriv ) {
struct proc_dir_entry *entry;
+
/* First setup the device directory */
strcpy(apriv->proc_name,dev->name);
apriv->proc_entry = proc_mkdir_mode(apriv->proc_name, airo_perm,
airo_entry);
if (!apriv->proc_entry)
goto fail;
- apriv->proc_entry->uid = proc_uid;
- apriv->proc_entry->gid = proc_gid;
+ apriv->proc_entry->uid = proc_kuid;
+ apriv->proc_entry->gid = proc_kgid;
/* Setup the StatsDelta */
entry = proc_create_data("StatsDelta", S_IRUGO & proc_perm,
apriv->proc_entry, &proc_statsdelta_ops, dev);
if (!entry)
goto fail_stats_delta;
- entry->uid = proc_uid;
- entry->gid = proc_gid;
+ entry->uid = proc_kuid;
+ entry->gid = proc_kgid;
/* Setup the Stats */
entry = proc_create_data("Stats", S_IRUGO & proc_perm,
apriv->proc_entry, &proc_stats_ops, dev);
if (!entry)
goto fail_stats;
- entry->uid = proc_uid;
- entry->gid = proc_gid;
+ entry->uid = proc_kuid;
+ entry->gid = proc_kgid;
/* Setup the Status */
entry = proc_create_data("Status", S_IRUGO & proc_perm,
apriv->proc_entry, &proc_status_ops, dev);
if (!entry)
goto fail_status;
- entry->uid = proc_uid;
- entry->gid = proc_gid;
+ entry->uid = proc_kuid;
+ entry->gid = proc_kgid;
/* Setup the Config */
entry = proc_create_data("Config", proc_perm,
apriv->proc_entry, &proc_config_ops, dev);
if (!entry)
goto fail_config;
- entry->uid = proc_uid;
- entry->gid = proc_gid;
+ entry->uid = proc_kuid;
+ entry->gid = proc_kgid;
/* Setup the SSID */
entry = proc_create_data("SSID", proc_perm,
apriv->proc_entry, &proc_SSID_ops, dev);
if (!entry)
goto fail_ssid;
- entry->uid = proc_uid;
- entry->gid = proc_gid;
+ entry->uid = proc_kuid;
+ entry->gid = proc_kgid;
/* Setup the APList */
entry = proc_create_data("APList", proc_perm,
apriv->proc_entry, &proc_APList_ops, dev);
if (!entry)
goto fail_aplist;
- entry->uid = proc_uid;
- entry->gid = proc_gid;
+ entry->uid = proc_kuid;
+ entry->gid = proc_kgid;
/* Setup the BSSList */
entry = proc_create_data("BSSList", proc_perm,
apriv->proc_entry, &proc_BSSList_ops, dev);
if (!entry)
goto fail_bsslist;
- entry->uid = proc_uid;
- entry->gid = proc_gid;
+ entry->uid = proc_kuid;
+ entry->gid = proc_kgid;
/* Setup the WepKey */
entry = proc_create_data("WepKey", proc_perm,
apriv->proc_entry, &proc_wepkey_ops, dev);
if (!entry)
goto fail_wepkey;

This diff is incomplete. Download the complete patch.

drivers/staging/android/binder.c

View file

This diff is incomplete. Download the complete patch.

drivers/tty/tty_audit.c

View file

This diff is incomplete. Download the complete patch.

drivers/usb/gadget/f_fs.c

View file

This diff is incomplete. Download the complete patch.

drivers/usb/gadget/inode.c

View file

This diff is incomplete. Download the complete patch.

drivers/xen/xenfs/super.c

View file

This diff is incomplete. Download the complete patch.

fs/9p/acl.c

View file

This diff is incomplete. Download the complete patch.

fs/adfs/adfs.h

View file

This diff is incomplete. Download the complete patch.

fs/adfs/inode.c

View file

This diff is incomplete. Download the complete patch.

fs/adfs/super.c

View file

This diff is incomplete. Download the complete patch.

fs/affs/affs.h

View file

This diff is incomplete. Download the complete patch.

fs/affs/inode.c

View file

This diff is incomplete. Download the complete patch.

fs/affs/super.c

View file

This diff is incomplete. Download the complete patch.

fs/befs/befs.h

View file

This diff is incomplete. Download the complete patch.

fs/befs/linuxvfs.c

View file

This diff is incomplete. Download the complete patch.

fs/bfs/inode.c

View file

This diff is incomplete. Download the complete patch.

fs/btrfs/acl.c

View file

This diff is incomplete. Download the complete patch.

fs/btrfs/delayed-inode.c

View file

This diff is incomplete. Download the complete patch.

fs/btrfs/inode.c

View file

This diff is incomplete. Download the complete patch.

fs/btrfs/ioctl.c

View file

This diff is incomplete. Download the complete patch.

fs/configfs/inode.c

View file

This diff is incomplete. Download the complete patch.

fs/cramfs/inode.c

View file

This diff is incomplete. Download the complete patch.

fs/debugfs/inode.c

View file

This diff is incomplete. Download the complete patch.

fs/ecryptfs/main.c

View file

This diff is incomplete. Download the complete patch.

fs/ecryptfs/messaging.c

View file

This diff is incomplete. Download the complete patch.

fs/efs/inode.c

View file

This diff is incomplete. Download the complete patch.

fs/exofs/inode.c

View file

This diff is incomplete. Download the complete patch.

fs/ext2/acl.c

View file

This diff is incomplete. Download the complete patch.

fs/ext3/acl.c

View file

This diff is incomplete. Download the complete patch.

fs/ext3/super.c

View file

This diff is incomplete. Download the complete patch.

fs/ext4/acl.c

View file

This diff is incomplete. Download the complete patch.

fs/ext4/super.c

View file

This diff is incomplete. Download the complete patch.

fs/fat/fat.h

View file

This diff is incomplete. Download the complete patch.

fs/fat/file.c

View file

This diff is incomplete. Download the complete patch.

fs/fat/inode.c

View file

This diff is incomplete. Download the complete patch.

fs/freevxfs/vxfs_inode.c

View file

This diff is incomplete. Download the complete patch.

fs/generic_acl.c

View file

This diff is incomplete. Download the complete patch.

fs/gfs2/acl.c

View file

This diff is incomplete. Download the complete patch.

fs/gfs2/quota.c

View file

This diff is incomplete. Download the complete patch.

fs/hfs/hfs_fs.h

View file

This diff is incomplete. Download the complete patch.

fs/hfs/inode.c

View file

This diff is incomplete. Download the complete patch.

fs/hfs/super.c

View file

This diff is incomplete. Download the complete patch.

fs/hfsplus/catalog.c

View file

This diff is incomplete. Download the complete patch.

fs/hfsplus/hfsplus_fs.h

View file

This diff is incomplete. Download the complete patch.

fs/hfsplus/inode.c

View file

This diff is incomplete. Download the complete patch.

fs/hfsplus/options.c

View file

This diff is incomplete. Download the complete patch.

fs/hostfs/hostfs_kern.c

View file

This diff is incomplete. Download the complete patch.

fs/hpfs/hpfs_fn.h

View file

This diff is incomplete. Download the complete patch.

fs/hpfs/inode.c

View file

This diff is incomplete. Download the complete patch.

fs/hpfs/namei.c

View file

This diff is incomplete. Download the complete patch.

fs/hpfs/super.c

View file

This diff is incomplete. Download the complete patch.

fs/hugetlbfs/inode.c

View file

This diff is incomplete. Download the complete patch.

fs/isofs/inode.c

View file

This diff is incomplete. Download the complete patch.

fs/isofs/isofs.h

View file

This diff is incomplete. Download the complete patch.

fs/isofs/rock.c

View file

This diff is incomplete. Download the complete patch.

fs/jffs2/acl.c

View file

This diff is incomplete. Download the complete patch.

fs/jffs2/file.c

View file

This diff is incomplete. Download the complete patch.

fs/jffs2/fs.c

View file

This diff is incomplete. Download the complete patch.

fs/jffs2/os-linux.h

View file

This diff is incomplete. Download the complete patch.

fs/jfs/acl.c

View file

This diff is incomplete. Download the complete patch.

fs/jfs/file.c

View file

This diff is incomplete. Download the complete patch.

fs/jfs/jfs_imap.c

View file

This diff is incomplete. Download the complete patch.

fs/jfs/jfs_incore.h

View file

This diff is incomplete. Download the complete patch.

fs/jfs/super.c

View file

This diff is incomplete. Download the complete patch.

fs/jfs/xattr.c

View file

This diff is incomplete. Download the complete patch.

fs/logfs/inode.c

View file

This diff is incomplete. Download the complete patch.

fs/logfs/readwrite.c

View file

This diff is incomplete. Download the complete patch.

fs/minix/inode.c

View file

This diff is incomplete. Download the complete patch.

fs/namei.c

View file

This diff is incomplete. Download the complete patch.

fs/nfs/nfs3acl.c

View file

This diff is incomplete. Download the complete patch.

fs/nfsd/vfs.c

View file

This diff is incomplete. Download the complete patch.

fs/nilfs2/inode.c

View file

This diff is incomplete. Download the complete patch.

fs/ntfs/inode.c

View file

This diff is incomplete. Download the complete patch.

fs/ntfs/super.c

View file

This diff is incomplete. Download the complete patch.

fs/ntfs/volume.h

View file

This diff is incomplete. Download the complete patch.

fs/ocfs2/acl.c

View file

This diff is incomplete. Download the complete patch.

fs/ocfs2/file.c

View file

This diff is incomplete. Download the complete patch.

fs/ocfs2/quota_global.c

View file

This diff is incomplete. Download the complete patch.

fs/ocfs2/quota_local.c

View file

This diff is incomplete. Download the complete patch.

fs/omfs/inode.c

View file

This diff is incomplete. Download the complete patch.

fs/omfs/omfs.h

View file

This diff is incomplete. Download the complete patch.

fs/open.c

View file

This diff is incomplete. Download the complete patch.

fs/posix_acl.c

View file

This diff is incomplete. Download the complete patch.

fs/proc/base.c

View file

This diff is incomplete. Download the complete patch.

fs/qnx4/inode.c

View file

This diff is incomplete. Download the complete patch.

fs/qnx6/inode.c

View file

This diff is incomplete. Download the complete patch.

fs/quota/Makefile

View file

This diff is incomplete. Download the complete patch.

fs/quota/dquot.c

View file

This diff is incomplete. Download the complete patch.

fs/quota/kqid.c

View file

This diff is incomplete. Download the complete patch.

fs/quota/netlink.c

View file

This diff is incomplete. Download the complete patch.

fs/quota/quota.c

View file

This diff is incomplete. Download the complete patch.

fs/quota/quota_tree.c

View file

This diff is incomplete. Download the complete patch.

fs/quota/quota_v1.c

View file

This diff is incomplete. Download the complete patch.

fs/quota/quota_v2.c

View file

This diff is incomplete. Download the complete patch.

fs/reiserfs/inode.c

View file

This diff is incomplete. Download the complete patch.

fs/reiserfs/xattr_acl.c

View file

This diff is incomplete. Download the complete patch.

fs/seq_file.c

View file

This diff is incomplete. Download the complete patch.

fs/squashfs/inode.c

View file

This diff is incomplete. Download the complete patch.

fs/sysv/inode.c

View file

This diff is incomplete. Download the complete patch.

fs/ubifs/budget.c

View file

This diff is incomplete. Download the complete patch.

fs/ubifs/debug.c

View file

This diff is incomplete. Download the complete patch.

fs/ubifs/journal.c

View file

This diff is incomplete. Download the complete patch.

fs/ubifs/sb.c

View file

This diff is incomplete. Download the complete patch.

fs/ubifs/super.c

View file

This diff is incomplete. Download the complete patch.

fs/ubifs/ubifs.h

View file

This diff is incomplete. Download the complete patch.

fs/udf/inode.c

View file

This diff is incomplete. Download the complete patch.

fs/udf/super.c

View file

This diff is incomplete. Download the complete patch.

fs/udf/udf_sb.h

View file

This diff is incomplete. Download the complete patch.

fs/ufs/inode.c

View file

This diff is incomplete. Download the complete patch.

fs/xattr.c

View file

This diff is incomplete. Download the complete patch.

fs/xattr_acl.c

View file

This diff is incomplete. Download the complete patch.

fs/xfs/xfs_acl.c

View file

This diff is incomplete. Download the complete patch.

fs/xfs/xfs_quotaops.c

View file

This diff is incomplete. Download the complete patch.

fs/xfs/xfs_trans_dquot.c

View file

This diff is incomplete. Download the complete patch.

include/drm/drmP.h

View file

This diff is incomplete. Download the complete patch.

include/linux/audit.h

View file

This diff is incomplete. Download the complete patch.

include/linux/inet_diag.h

View file

This diff is incomplete. Download the complete patch.

include/linux/init_task.h

View file

This diff is incomplete. Download the complete patch.

include/linux/ipc.h

View file

This diff is incomplete. Download the complete patch.

include/linux/key.h

View file

This diff is incomplete. Download the complete patch.

include/linux/loop.h

View file

This diff is incomplete. Download the complete patch.

include/linux/netlink.h

View file

This diff is incomplete. Download the complete patch.

include/linux/posix_acl.h

View file

This diff is incomplete. Download the complete patch.

include/linux/posix_acl_xattr.h

View file

This diff is incomplete. Download the complete patch.

include/linux/projid.h

View file

This diff is incomplete. Download the complete patch.

include/linux/quota.h

View file

This diff is incomplete. Download the complete patch.

include/linux/quotaops.h

View file

This diff is incomplete. Download the complete patch.

include/linux/sched.h

View file

This diff is incomplete. Download the complete patch.

include/linux/security.h

View file

This diff is incomplete. Download the complete patch.

include/linux/seq_file.h

View file

This diff is incomplete. Download the complete patch.

include/linux/tsacct_kern.h

View file

This diff is incomplete. Download the complete patch.

include/linux/tty.h

View file

This diff is incomplete. Download the complete patch.

include/linux/user_namespace.h

View file

This diff is incomplete. Download the complete patch.

include/net/ax25.h

View file

This diff is incomplete. Download the complete patch.

include/net/ipv6.h

View file

This diff is incomplete. Download the complete patch.

include/net/netlabel.h

View file

This diff is incomplete. Download the complete patch.

include/net/netns/ipv4.h

View file

This diff is incomplete. Download the complete patch.

include/net/sch_generic.h

View file

This diff is incomplete. Download the complete patch.

include/net/sock.h

View file

This diff is incomplete. Download the complete patch.

include/net/tcp.h

View file

This diff is incomplete. Download the complete patch.

include/net/xfrm.h

View file

This diff is incomplete. Download the complete patch.

init/Kconfig

View file

This diff is incomplete. Download the complete patch.

ipc/msg.c

View file

This diff is incomplete. Download the complete patch.

ipc/sem.c

View file

This diff is incomplete. Download the complete patch.

ipc/shm.c

View file

This diff is incomplete. Download the complete patch.

ipc/util.c

View file

This diff is incomplete. Download the complete patch.

ipc/util.h

View file

This diff is incomplete. Download the complete patch.

kernel/acct.c

View file

This diff is incomplete. Download the complete patch.

kernel/audit.c

View file

This diff is incomplete. Download the complete patch.

kernel/audit.h

View file

This diff is incomplete. Download the complete patch.

kernel/audit_watch.c

View file

This diff is incomplete. Download the complete patch.

kernel/auditfilter.c

View file

This diff is incomplete. Download the complete patch.

kernel/auditsc.c

View file

This diff is incomplete. Download the complete patch.

kernel/cred.c

View file

This diff is incomplete. Download the complete patch.

kernel/pid.c

View file

This diff is incomplete. Download the complete patch.

kernel/pid_namespace.c

View file

This diff is incomplete. Download the complete patch.

kernel/taskstats.c

View file

This diff is incomplete. Download the complete patch.

kernel/trace/trace.c

View file

This diff is incomplete. Download the complete patch.

kernel/trace/trace.h

View file

This diff is incomplete. Download the complete patch.

kernel/tsacct.c

View file

This diff is incomplete. Download the complete patch.

kernel/user.c

View file

This diff is incomplete. Download the complete patch.

kernel/user_namespace.c

View file

This diff is incomplete. Download the complete patch.

net/appletalk/atalk_proc.c

View file

This diff is incomplete. Download the complete patch.

net/ax25/ax25_uid.c

View file

This diff is incomplete. Download the complete patch.

net/core/dev.c

View file

This diff is incomplete. Download the complete patch.

net/core/scm.c

View file

This diff is incomplete. Download the complete patch.

net/core/sock.c

View file

This diff is incomplete. Download the complete patch.

net/dns_resolver/dns_key.c

View file

This diff is incomplete. Download the complete patch.

net/ipv4/inet_diag.c

View file

This diff is incomplete. Download the complete patch.

net/ipv4/ping.c

View file

This diff is incomplete. Download the complete patch.

net/ipv4/raw.c

View file

This diff is incomplete. Download the complete patch.

net/ipv4/sysctl_net_ipv4.c

View file

This diff is incomplete. Download the complete patch.

net/ipv4/tcp_ipv4.c

View file

This diff is incomplete. Download the complete patch.

net/ipv4/udp.c

View file

This diff is incomplete. Download the complete patch.

net/ipv4/udp_diag.c

View file

This diff is incomplete. Download the complete patch.

net/ipv6/ip6_flowlabel.c

View file

This diff is incomplete. Download the complete patch.

net/ipv6/raw.c

View file

This diff is incomplete. Download the complete patch.

net/ipv6/tcp_ipv6.c

View file

This diff is incomplete. Download the complete patch.

net/ipv6/udp.c

View file

This diff is incomplete. Download the complete patch.

net/ipx/ipx_proc.c

View file

This diff is incomplete. Download the complete patch.

net/key/af_key.c

View file

This diff is incomplete. Download the complete patch.

net/llc/llc_proc.c

View file

This diff is incomplete. Download the complete patch.

net/netfilter/nfnetlink_log.c

View file

This diff is incomplete. Download the complete patch.

net/netfilter/xt_LOG.c

View file

This diff is incomplete. Download the complete patch.

net/netfilter/xt_owner.c

View file

This diff is incomplete. Download the complete patch.

net/netfilter/xt_recent.c

View file

This diff is incomplete. Download the complete patch.

net/netlabel/netlabel_unlabeled.c

View file

This diff is incomplete. Download the complete patch.

net/netlabel/netlabel_user.c

View file

This diff is incomplete. Download the complete patch.

net/netlink/af_netlink.c

View file

This diff is incomplete. Download the complete patch.

net/packet/af_packet.c

View file

This diff is incomplete. Download the complete patch.

net/phonet/socket.c

View file

This diff is incomplete. Download the complete patch.

net/rxrpc/ar-key.c

View file

This diff is incomplete. Download the complete patch.

net/sched/cls_api.c

View file

This diff is incomplete. Download the complete patch.

net/sched/cls_basic.c

View file

This diff is incomplete. Download the complete patch.

net/sched/cls_cgroup.c

View file

This diff is incomplete. Download the complete patch.

net/sched/cls_flow.c

View file

This diff is incomplete. Download the complete patch.

net/sched/cls_fw.c

View file

This diff is incomplete. Download the complete patch.

net/sched/cls_route.c

View file

This diff is incomplete. Download the complete patch.

net/sched/cls_rsvp.h

View file

This diff is incomplete. Download the complete patch.

net/sched/cls_tcindex.c

View file

This diff is incomplete. Download the complete patch.

net/sched/cls_u32.c

View file

This diff is incomplete. Download the complete patch.

net/sctp/proc.c

View file

This diff is incomplete. Download the complete patch.

net/xfrm/xfrm_policy.c

View file

This diff is incomplete. Download the complete patch.

net/xfrm/xfrm_state.c

View file

This diff is incomplete. Download the complete patch.

net/xfrm/xfrm_user.c

View file

This diff is incomplete. Download the complete patch.

security/apparmor/domain.c

View file

This diff is incomplete. Download the complete patch.

security/apparmor/file.c

View file

This diff is incomplete. Download the complete patch.

security/apparmor/include/audit.h

View file

This diff is incomplete. Download the complete patch.

security/apparmor/include/file.h

View file

This diff is incomplete. Download the complete patch.

security/apparmor/lsm.c

View file

This diff is incomplete. Download the complete patch.

security/capability.c

View file

This diff is incomplete. Download the complete patch.

security/integrity/evm/evm_crypto.c

View file

This diff is incomplete. Download the complete patch.

security/integrity/ima/ima_audit.c

View file

This diff is incomplete. Download the complete patch.

security/integrity/ima/ima_policy.c

View file

This diff is incomplete. Download the complete patch.

security/keys/internal.h

View file

This diff is incomplete. Download the complete patch.

security/keys/key.c

View file

This diff is incomplete. Download the complete patch.

security/keys/keyctl.c

View file

This diff is incomplete. Download the complete patch.

security/keys/keyring.c

View file

This diff is incomplete. Download the complete patch.

security/keys/permission.c

View file

This diff is incomplete. Download the complete patch.

security/keys/proc.c

View file

This diff is incomplete. Download the complete patch.

security/keys/process_keys.c

View file

This diff is incomplete. Download the complete patch.

security/keys/request_key.c

View file

This diff is incomplete. Download the complete patch.

security/security.c

View file

This diff is incomplete. Download the complete patch.

security/selinux/selinuxfs.c

View file

This diff is incomplete. Download the complete patch.

security/selinux/ss/services.c

View file

This diff is incomplete. Download the complete patch.

security/tomoyo/audit.c

View file

This diff is incomplete. Download the complete patch.

security/tomoyo/common.c

View file

This diff is incomplete. Download the complete patch.

security/tomoyo/common.h

View file

This diff is incomplete. Download the complete patch.

security/tomoyo/condition.c

View file

This diff is incomplete. Download the complete patch.

security/tomoyo/tomoyo.c

View file

This diff is incomplete. Download the complete patch.