OpenE2K/linux
6
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
29070cdcc7
linux/tools
History
Eric W. Biederman 93927a247c mnt: Add tests for unprivileged remount cases that have found to be faulty 
commit db181ce011 upstream.

Kenton Varda <kenton@sandstorm.io> discovered that by remounting a
read-only bind mount read-only in a user namespace the
MNT_LOCK_READONLY bit would be cleared, allowing an unprivileged user
to the remount a read-only mount read-write.

Upon review of the code in remount it was discovered that the code allowed
nosuid, noexec, and nodev to be cleared.  It was also discovered that
the code was allowing the per mount atime flags to be changed.

The first naive patch to fix these issues contained the flaw that using
default atime settings when remounting a filesystem could be disallowed.

To avoid this problems in the future add tests to ensure unprivileged
remounts are succeeding and failing at the appropriate times.

Acked-by: Serge E. Hallyn <serge.hallyn@ubuntu.com>
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2014-09-17 09:19:22 -07:00
..
cgroup cgroups: fix cgroup_event_listener error handling 2013-01-08 10:00:44 -08:00
firewire tools/firewire: nosy-dump: check for allocation failure 2012-12-02 20:10:18 +01:00
hv Tools: hv: remove inclusion of linux/types.h 2013-12-08 22:47:12 -08:00
include tools include: Include <linux/compiler.h> from asm/bug.h 2014-01-13 10:14:13 -03:00
lguest tools/lguest: offer VIRTIO_F_ANY_LAYOUT for net device. 2013-07-15 11:18:32 +09:30
lib tools lib traceevent: Fix memory leak in pretty_print() 2014-05-31 13:20:27 -07:00
net tools/net/Makefile: Define PACKAGE to fix build problems 2014-03-12 00:07:55 -04:00
nfsd
perf perf bench: Fix NULL pointer dereference in "perf bench all" 2014-03-14 13:45:54 -03:00
power Merge branch 'release' of git://git.kernel.org/pub/scm/linux/kernel/git/lenb/linux 2014-02-02 11:28:48 -08:00
scripts tools lib traceevent: Add global QUIET_CC_FPIC build output 2013-12-19 16:18:10 -03:00
testing mnt: Add tests for unprivileged remount cases that have found to be faulty 2014-09-17 09:19:22 -07:00
thermal/tmon tools/thermal: Introduce tmon, a tool for thermal subsystem 2013-11-07 08:45:34 +08:00
usb tools: ffs-test: fix header values endianess 2014-07-09 11:18:27 -07:00
virtio tools/virtio: add a missing ) 2014-05-13 13:32:48 +02:00
vm tools/: Convert to new topic libraries 2013-12-16 16:03:27 -03:00
Makefile ACPI and power management updates for 3.14-rc1 2014-01-24 15:51:02 -08:00