summaryrefslogtreecommitdiff
path: root/drivers/target
diff options
context:
space:
mode:
authorDavid Sterba <dsterba@suse.cz>2014-01-15 17:15:52 (GMT)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>2014-02-06 19:22:22 (GMT)
commitb572f9aaacdcb9b22ee6483fecaaa7a38c757896 (patch)
tree74746b9716050c1f114343181e20d999a92e2d30 /drivers/target
parenta0f602ae0ea2f3e6f519f8927cd9feb3bbaf4843 (diff)
downloadlinux-fsl-qoriq-b572f9aaacdcb9b22ee6483fecaaa7a38c757896.tar.xz
btrfs: restrict snapshotting to own subvolumes
commit d024206133ce21936b3d5780359afc00247655b7 upstream. Currently, any user can snapshot any subvolume if the path is accessible and thus indirectly create and keep files he does not own under his direcotries. This is not possible with traditional directories. In security context, a user can snapshot root filesystem and pin any potentially buggy binaries, even if the updates are applied. All the snapshots are visible to the administrator, so it's possible to verify if there are suspicious snapshots. Another more practical problem is that any user can pin the space used by eg. root and cause ENOSPC. Original report: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/484786 Signed-off-by: David Sterba <dsterba@suse.cz> Signed-off-by: Josef Bacik <jbacik@fb.com> Signed-off-by: Chris Mason <clm@fb.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/target')
0 files changed, 0 insertions, 0 deletions