Christian Brauner 0558c1bf5a capability: handle idmapped mounts ... In order to determine whether a caller holds privilege over a given inode the capability framework exposes the two helpers privileged_wrt_inode_uidgid() and capable_wrt_inode_uidgid(). The former verifies that the inode has a mapping in the caller's user namespace and the latter additionally verifies that the caller has the requested capability in their current user namespace. If the inode is accessed through an idmapped mount map it into the mount's user namespace. Afterwards the checks are identical to non-idmapped inodes. If the initial user namespace is passed all operations are a nop so non-idmapped mounts will not see a change in behavior. Link: https://lore.kernel.org/r/20210121131959.646623-5-christian.brauner@ubuntu.com Cc: Christoph Hellwig <hch@lst.de> Cc: David Howells <dhowells@redhat.com> Cc: Al Viro <viro@zeniv.linux.org.uk> Cc: linux-fsdevel@vger.kernel.org Reviewed-by: Christoph Hellwig <hch@lst.de> Reviewed-by: James Morris <jamorris@linux.microsoft.com> Acked-by: Serge Hallyn <serge@hallyn.com> Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>		2021-01-24 14:27:16 +01:00
..
bpf	fs: add file and path permissions helpers	2021-01-24 14:27:16 +01:00
cgroup	Merge branch 'for-5.11' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup	2020-12-28 11:16:38 -08:00
configs	staging: ION: remove some references to CONFIG_ION	2021-01-06 17:39:38 +01:00
debug	smp: Cleanup smp_call_function*()	2020-11-24 16:47:49 +01:00
dma	dma-mapping updates for 5.11:	2020-12-22 13:19:43 -08:00
entry	The new preemtible kmap_local() implementation:	2020-12-14 18:35:53 -08:00
events	Merge branch 'exec-update-lock-for-v5.11' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace	2020-12-15 19:36:48 -08:00
gcov	gcov: fix kernel-doc markup issue	2020-12-15 22:46:18 -08:00
irq	genirq: Fix export of irq_to_desc() for powerpc KVM	2020-12-25 11:02:39 -08:00
kcsan
livepatch
locking	A moderate set of locking updates:	2020-12-14 17:27:47 -08:00
power	Power management updates for 5.11-rc1	2020-12-15 16:30:31 -08:00
printk	printk changes for 5.11	2020-12-16 10:45:11 -08:00
rcu	Merge branch 'rcu/urgent' of git://git.kernel.org/pub/scm/linux/kernel/git/paulmck/linux-rcu	2021-01-04 10:55:19 -08:00
sched	Fix a context switch performance regression.	2020-12-27 09:00:47 -08:00
time	Update/fix two CPU sanity checks in the hotplug and the boot code,	2020-12-27 09:03:41 -08:00
trace	tracing/kprobes: Do the notrace functions check without kprobes on ftrace	2021-01-11 16:09:53 -05:00
.gitignore
acct.c	kernel/acct.c: use #elif instead of #end and #elif	2020-12-15 22:46:15 -08:00
async.c
audit.c	audit: replace atomic_add_return()	2020-12-02 22:52:16 -05:00
audit.h
audit_fsnotify.c	fsnotify: generalize handle_inode_event()	2020-12-03 14:58:35 +01:00
audit_tree.c	fsnotify: generalize handle_inode_event()	2020-12-03 14:58:35 +01:00
audit_watch.c	fsnotify: generalize handle_inode_event()	2020-12-03 14:58:35 +01:00
auditfilter.c
auditsc.c	audit/stable-5.11 PR 20201214	2020-12-16 10:54:03 -08:00
backtracetest.c
bounds.c
capability.c	capability: handle idmapped mounts	2021-01-24 14:27:16 +01:00
compat.c
configs.c
context_tracking.c
cpu.c	Scheduler updates:	2020-12-14 18:29:11 -08:00
cpu_pm.c
crash_core.c	kdump: append uts_namespace.name offset to VMCOREINFO	2020-12-15 22:46:18 -08:00
crash_dump.c
cred.c
delayacct.c
dma.c
exec_domain.c
exit.c	kernel/io_uring: cancel io_uring before task works	2020-12-30 19:36:54 -07:00
extable.c
fail_function.c	fault-injection: handle EI_ETYPE_TRUE	2020-12-15 22:46:19 -08:00
fork.c	kasan: rename (un)poison_shadow to (un)poison_range	2020-12-22 12:55:06 -08:00
freezer.c
futex.c	Merge branch 'locking/rwsem'	2020-12-09 17:08:45 +01:00
gen_kheaders.sh
groups.c
hung_task.c
iomem.c
irq_work.c	irq_work: Optimize irq_work_single()	2020-11-24 16:47:49 +01:00
jump_label.c	jump_label: Fix usage in module __init	2020-12-18 16:53:12 +01:00
kallsyms.c
kcmp.c	Merge branch 'exec-update-lock-for-v5.11' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace	2020-12-15 19:36:48 -08:00
Kconfig.freezer
Kconfig.hz
Kconfig.locks
Kconfig.preempt
kcov.c
kexec.c
kexec_core.c	crypto: sha - split sha.h into sha1.h and sha2.h	2020-11-20 14:45:33 +11:00
kexec_elf.c
kexec_file.c	crypto: sha - split sha.h into sha1.h and sha2.h	2020-11-20 14:45:33 +11:00
kexec_internal.h
kheaders.c
kmod.c
kprobes.c
ksysfs.c
kthread.c	Merge branch 'akpm' (patches from Andrew)	2020-12-15 12:53:37 -08:00
latencytop.c
Makefile	kcov: don't instrument with UBSAN	2020-12-15 22:46:19 -08:00
module-internal.h
module.c	Modules updates for v5.11	2020-12-17 13:01:31 -08:00
module_signature.c
module_signing.c
notifier.c
nsproxy.c	fixes-v5.11	2020-12-14 16:40:27 -08:00
padata.c
panic.c
params.c	Modules updates for v5.11	2020-12-17 13:01:31 -08:00
pid.c	Merge branch 'exec-update-lock-for-v5.11' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace	2020-12-15 19:36:48 -08:00
pid_namespace.c	fixes-v5.11	2020-12-14 16:40:27 -08:00
profile.c
ptrace.c	Merge branch 'akpm' (patches from Andrew)	2020-12-15 12:53:37 -08:00
range.c
reboot.c	reboot: hide from sysfs not applicable settings	2020-12-15 22:46:19 -08:00
regset.c
relay.c	relay: allow the use of const callback structs	2020-12-15 22:46:18 -08:00
resource.c	kernel/resource.c: fix kernel-doc markups	2020-12-15 22:46:18 -08:00
resource_kunit.c	resource: provide meaningful MODULE_LICENSE() in test suite	2020-11-25 18:52:35 +01:00
rseq.c
scftorture.c
scs.c	scs: switch to vmapped shadow stacks	2020-12-01 10:30:28 +00:00
seccomp.c	seccomp updates for v5.11-rc1	2020-12-16 11:30:10 -08:00
signal.c	tif-task_work.arch-2020-12-14	2020-12-16 12:33:35 -08:00
smp.c	Merge branch 'linus' into sched/core, to resolve semantic conflict	2020-11-27 11:10:50 +01:00
smpboot.c
smpboot.h
softirq.c	Misc fixes/updates:	2020-12-27 09:06:10 -08:00
stackleak.c
stacktrace.c
static_call.c
stop_machine.c	Merge branch 'linus' into sched/core, to resolve semantic conflict	2020-11-27 11:10:50 +01:00
sys.c	fs: add file and path permissions helpers	2021-01-24 14:27:16 +01:00
sys_ni.c	epoll: wire up syscall epoll_pwait2	2020-12-19 11:18:38 -08:00
sysctl-test.c
sysctl.c	rcu: Panic after fixed number of stalls	2020-11-19 19:37:16 -08:00
task_work.c	task_work: remove legacy TWA_SIGNAL path	2020-12-12 09:17:38 -07:00
taskstats.c
test_kprobes.c
torture.c
tracepoint.c
tsacct.c
ucount.c
uid16.c
uid16.h
umh.c
up.c
user-return-notifier.c
user.c
user_namespace.c	fixes-v5.11	2020-12-14 16:40:27 -08:00
usermode_driver.c
utsname.c
utsname_sysctl.c
watch_queue.c
watchdog.c
watchdog_hld.c
workqueue.c	Merge branch 'for-5.11' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/wq	2020-12-28 11:23:02 -08:00
workqueue_internal.h