diff options
| author | Andy Whitcroft <apw@canonical.com> | 2012-05-01 16:17:52 +0100 |
|---|---|---|
| committer | John Rigby <john.rigby@linaro.org> | 2012-06-25 15:02:27 -0600 |
| commit | 721964d7ebe2759d41a7dfe78b1d6effdb1859a7 (patch) | |
| tree | 089afd15a3994015e523123f0a8b40d27525aa97 /security/apparmor/domain.c | |
| parent | 0dbf68a3e2f87216e834403eb4ac61d455bf7c50 (diff) | |
UBUNTU: ubuntu: overlayfs -- overlayfs: switch to use inode_only_permissions
When checking permissions on an overlayfs inode we do not take into
account either device cgroup restrictions nor security permissions.
This allows a user to mount an overlayfs layer over a restricted device
directory and by pass those permissions to open otherwise restricted
files.
Switch over to the newly introduced inode_only_permissions.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Miklos Szeredi <mszeredi@suse.cz>
Diffstat (limited to 'security/apparmor/domain.c')
0 files changed, 0 insertions, 0 deletions