linux/fs/coda
Eric W. Biederman d83f5901bc coda: Restrict coda messages to the initial user namespace
Remove the slight chance that uids and gids in coda messages will be
interpreted in the wrong user namespace.

- Only allow processes in the initial user namespace to open the coda
  character device to communicate with coda filesystems.
- Explicitly convert the uids in the coda header into the initial user
  namespace.
- In coda_vattr_to_attr make kuids and kgids from the initial user
  namespace uids and gids in struct coda_vattr that just came from
  userspace.
- In coda_iattr_to_vattr convert kuids and kgids into uids and gids
  in the intial user namespace and store them in struct coda_vattr for
  sending to coda userspace programs.

Nothing needs to be changed with mounts as coda does not support
being mounted in anything other than the initial user namespace.

Cc: Jan Harkes <jaharkes@cs.cmu.edu>
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
2013-02-13 06:00:53 -08:00
..
cache.c coda: use list_for_each_entry 2012-07-14 16:32:56 +04:00
cnode.c coda: switch coda_cnode_make() to sane API as well, clean coda_lookup() 2012-01-10 11:13:16 -05:00
coda_cache.h
coda_fs_i.h coda: switch coda_cnode_make() to sane API as well, clean coda_lookup() 2012-01-10 11:13:16 -05:00
coda_int.h
coda_linux.c coda: Restrict coda messages to the initial user namespace 2013-02-13 06:00:53 -08:00
coda_linux.h
dir.c don't pass nameidata to ->create() 2012-07-14 16:34:47 +04:00
file.c
inode.c coda: Restrict coda messages to the initial pid namespace 2013-02-13 06:00:52 -08:00
Kconfig
Makefile
pioctl.c
psdev.c coda: Restrict coda messages to the initial user namespace 2013-02-13 06:00:53 -08:00
symlink.c
sysctl.c
upcall.c coda: Restrict coda messages to the initial user namespace 2013-02-13 06:00:53 -08:00