Christian Brauner 21cb47be6f inode: make init and permission helpers idmapped mount aware ... The inode_owner_or_capable() helper determines whether the caller is the owner of the inode or is capable with respect to that inode. Allow it to handle idmapped mounts. If the inode is accessed through an idmapped mount it according to the mount's user namespace. Afterwards the checks are identical to non-idmapped mounts. If the initial user namespace is passed nothing changes so non-idmapped mounts will see identical behavior as before. Similarly, allow the inode_init_owner() helper to handle idmapped mounts. It initializes a new inode on idmapped mounts by mapping the fsuid and fsgid of the caller from the mount's user namespace. If the initial user namespace is passed nothing changes so non-idmapped mounts will see identical behavior as before. Link: https://lore.kernel.org/r/20210121131959.646623-7-christian.brauner@ubuntu.com Cc: Christoph Hellwig <hch@lst.de> Cc: David Howells <dhowells@redhat.com> Cc: Al Viro <viro@zeniv.linux.org.uk> Cc: linux-fsdevel@vger.kernel.org Reviewed-by: Christoph Hellwig <hch@lst.de> Reviewed-by: James Morris <jamorris@linux.microsoft.com> Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>		2021-01-24 14:27:16 +01:00
..
bpf	inode: make init and permission helpers idmapped mount aware	2021-01-24 14:27:16 +01:00
cgroup	namei: make permission helpers idmapped mount aware	2021-01-24 14:27:16 +01:00
configs	staging: ION: remove some references to CONFIG_ION	2021-01-06 17:39:38 +01:00
debug
dma	dma-mapping updates for 5.11:	2020-12-22 13:19:43 -08:00
entry	The new preemtible kmap_local() implementation:	2020-12-14 18:35:53 -08:00
events	Merge branch 'exec-update-lock-for-v5.11' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace	2020-12-15 19:36:48 -08:00
gcov	gcov: fix kernel-doc markup issue	2020-12-15 22:46:18 -08:00
irq	genirq: Fix export of irq_to_desc() for powerpc KVM	2020-12-25 11:02:39 -08:00
kcsan
livepatch	livepatch: Use the default ftrace_ops instead of REGS when ARGS is available	2020-11-13 12:15:28 -05:00
locking
power	Power management updates for 5.11-rc1	2020-12-15 16:30:31 -08:00
printk	printk changes for 5.11	2020-12-16 10:45:11 -08:00
rcu	Merge branch 'rcu/urgent' of git://git.kernel.org/pub/scm/linux/kernel/git/paulmck/linux-rcu	2021-01-04 10:55:19 -08:00
sched	Fix a context switch performance regression.	2020-12-27 09:00:47 -08:00
time	Update/fix two CPU sanity checks in the hotplug and the boot code,	2020-12-27 09:03:41 -08:00
trace	tracing/kprobes: Do the notrace functions check without kprobes on ftrace	2021-01-11 16:09:53 -05:00
.gitignore
acct.c	kernel/acct.c: use #elif instead of #end and #elif	2020-12-15 22:46:15 -08:00
async.c	treewide: Remove uninitialized_var() usage	2020-07-16 12:35:15 -07:00
audit.c	audit: replace atomic_add_return()	2020-12-02 22:52:16 -05:00
audit.h
audit_fsnotify.c	fsnotify: generalize handle_inode_event()	2020-12-03 14:58:35 +01:00
audit_tree.c	fsnotify: generalize handle_inode_event()	2020-12-03 14:58:35 +01:00
audit_watch.c
auditfilter.c
auditsc.c	audit/stable-5.11 PR 20201214	2020-12-16 10:54:03 -08:00
backtracetest.c
bounds.c
capability.c	capability: handle idmapped mounts	2021-01-24 14:27:16 +01:00
compat.c
configs.c
context_tracking.c
cpu.c
cpu_pm.c
crash_core.c	kdump: append uts_namespace.name offset to VMCOREINFO	2020-12-15 22:46:18 -08:00
crash_dump.c
cred.c
delayacct.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 25	2019-05-21 11:52:39 +02:00
dma.c
exec_domain.c
exit.c	kernel/io_uring: cancel io_uring before task works	2020-12-30 19:36:54 -07:00
extable.c
fail_function.c	fault-injection: handle EI_ETYPE_TRUE	2020-12-15 22:46:19 -08:00
fork.c	kasan: rename (un)poison_shadow to (un)poison_range	2020-12-22 12:55:06 -08:00
freezer.c	Revert "libata, freezer: avoid block device removal while system is frozen"	2019-10-06 09:11:37 -06:00
futex.c
gen_kheaders.sh
groups.c
hung_task.c
iomem.c
irq_work.c	irq_work: Optimize irq_work_single()	2020-11-24 16:47:49 +01:00
jump_label.c	jump_label: Fix usage in module __init	2020-12-18 16:53:12 +01:00
kallsyms.c
kcmp.c	Merge branch 'exec-update-lock-for-v5.11' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace	2020-12-15 19:36:48 -08:00
Kconfig.freezer
Kconfig.hz
Kconfig.locks
Kconfig.preempt
kcov.c
kexec.c
kexec_core.c
kexec_elf.c
kexec_file.c
kexec_internal.h
kheaders.c
kmod.c
kprobes.c
ksysfs.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 170	2019-05-30 11:26:39 -07:00
kthread.c
latencytop.c	sysctl: pass kernel pointers to ->proc_handler	2020-04-27 02:07:40 -04:00
Makefile	kcov: don't instrument with UBSAN	2020-12-15 22:46:19 -08:00
module-internal.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 36	2019-05-24 17:27:11 +02:00
module.c	Modules updates for v5.11	2020-12-17 13:01:31 -08:00
module_signature.c
module_signing.c
notifier.c
nsproxy.c
padata.c
panic.c
params.c	Modules updates for v5.11	2020-12-17 13:01:31 -08:00
pid.c	Merge branch 'exec-update-lock-for-v5.11' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace	2020-12-15 19:36:48 -08:00
pid_namespace.c
profile.c
ptrace.c
range.c
reboot.c	reboot: hide from sysfs not applicable settings	2020-12-15 22:46:19 -08:00
regset.c	regset: kill ->get()	2020-07-27 14:31:12 -04:00
relay.c	relay: allow the use of const callback structs	2020-12-15 22:46:18 -08:00
resource.c	kernel/resource.c: fix kernel-doc markups	2020-12-15 22:46:18 -08:00
resource_kunit.c
rseq.c
scftorture.c
scs.c
seccomp.c	seccomp updates for v5.11-rc1	2020-12-16 11:30:10 -08:00
signal.c	tif-task_work.arch-2020-12-14	2020-12-16 12:33:35 -08:00
smp.c
smpboot.c
smpboot.h
softirq.c	Misc fixes/updates:	2020-12-27 09:06:10 -08:00
stackleak.c
stacktrace.c
static_call.c
stop_machine.c
sys.c	fs: add file and path permissions helpers	2021-01-24 14:27:16 +01:00
sys_ni.c	epoll: wire up syscall epoll_pwait2	2020-12-19 11:18:38 -08:00
sysctl-test.c
sysctl.c
task_work.c
taskstats.c
test_kprobes.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 25	2019-05-21 11:52:39 +02:00
torture.c	rcutorture: Make stutter_wait() caller restore priority	2020-11-06 17:13:54 -08:00
tracepoint.c
tsacct.c
ucount.c
uid16.c
uid16.h
umh.c
up.c	smp/up: Make smp_call_function_single() match SMP semantics	2020-02-07 15:34:12 +01:00
user-return-notifier.c
user.c
user_namespace.c	fixes-v5.11	2020-12-14 16:40:27 -08:00
usermode_driver.c
utsname.c	uts: Use generic ns_common::count	2020-08-19 14:13:20 +02:00
utsname_sysctl.c
watch_queue.c
watchdog.c
watchdog_hld.c
workqueue.c	Merge branch 'for-5.11' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/wq	2020-12-28 11:23:02 -08:00
workqueue_internal.h