Jan Kara 49b60d4aa9 BACKPORT: posix_acl: Clear SGID bit when setting file permissions ... (cherry pick from commit 073931017b49d9458aa351605b43a7e34598caef) When file permissions are modified via chmod(2) and the user is not in the owning group or capable of CAP_FSETID, the setgid bit is cleared in inode_change_ok(). Setting a POSIX ACL via setxattr(2) sets the file permissions as well as the new ACL, but doesn't clear the setgid bit in a similar way; this allows to bypass the check in chmod(2). Fix that. NB: We did not resolve the ACL leak in this CL, require additional upstream fix. References: CVE-2016-7097 Reviewed-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Jeff Layton <jlayton@redhat.com> Signed-off-by: Jan Kara <jack@suse.cz> Signed-off-by: Andreas Gruenbacher <agruenba@redhat.com> Bug: 32458736 Change-Id: I19591ad452cc825ac282b3cfd2daaa72aa9a1ac1		2017-02-07 15:21:07 +00:00
..
9p	BACKPORT: posix_acl: Clear SGID bit when setting file permissions	2017-02-07 15:21:07 +00:00
adfs
affs	fs/affs: make root lookup from blkdev logical size	2015-09-10 13:29:01 -07:00
afs
autofs4
befs
bfs
btrfs	BACKPORT: posix_acl: Clear SGID bit when setting file permissions	2017-02-07 15:21:07 +00:00
cachefiles	FS-Cache: Add missing initialization of ret in cachefiles_write_page()	2015-11-16 20:38:43 -05:00
ceph	BACKPORT: posix_acl: Clear SGID bit when setting file permissions	2017-02-07 15:21:07 +00:00
cifs	sched/wait: Fix the signal handling fix	2015-12-13 14:30:59 -08:00
coda	fs/coda: fix readlink buffer overflow	2015-09-10 13:29:01 -07:00
configfs	configfs: allow dynamic group creation	2015-11-20 16:17:32 -08:00
cramfs
debugfs	debugfs: fix refcount imbalance in start_creating	2015-11-11 02:04:44 -05:00
devpts
dlm	net: rename SOCK_ASYNC_NOSPACE and SOCK_ASYNC_WAITDATA	2015-12-01 15:45:05 -05:00
ecryptfs	UPSTREAM: ecryptfs: fix handling of directory opening	2016-08-12 13:44:30 -07:00
efivarfs
efs
exofs	osd fs: __r4w_get_page rely on PageUptodate for uptodate	2015-12-12 10:15:34 -08:00
exportfs
ext2	BACKPORT: posix_acl: Clear SGID bit when setting file permissions	2017-02-07 15:21:07 +00:00
ext4	BACKPORT: posix_acl: Clear SGID bit when setting file permissions	2017-02-07 15:21:07 +00:00
f2fs	BACKPORT: posix_acl: Clear SGID bit when setting file permissions	2017-02-07 15:21:07 +00:00
fat	fat: fix fake_offset handling on error path	2015-11-20 16:17:32 -08:00
freevxfs	freevxfs: Grammar s/an negative/a negative/	2015-08-07 13:59:24 +02:00
fscache	FS-Cache: Handle a write to the page immediately beyond the EOF marker	2015-11-11 02:11:02 -05:00
fuse	fuse: Add support for d_canonical_path	2016-04-25 19:16:11 -07:00
gfs2	BACKPORT: posix_acl: Clear SGID bit when setting file permissions	2017-02-07 15:21:07 +00:00
hfs	hfs: fix B-tree corruption after insertion at position 0	2015-09-10 13:29:01 -07:00
hfsplus	BACKPORT: posix_acl: Clear SGID bit when setting file permissions	2017-02-07 15:21:07 +00:00
hostfs	fs: create and use seq_show_option for escaping	2015-09-04 16:54:41 -07:00
hpfs	fs/hpfs/namei.c: remove unnecessary new_valid_dev() check	2015-11-09 15:11:24 -08:00
hugetlbfs	mm/hugetlbfs: fix bugs in fallocate hole punch of areas with holes	2015-11-20 16:17:32 -08:00
isofs
jbd2	Ext4 bug fixes for v4.4, including fixes for post-2038 time encodings,	2015-12-07 10:25:00 -08:00
jffs2	BACKPORT: posix_acl: Clear SGID bit when setting file permissions	2017-02-07 15:21:07 +00:00
jfs	BACKPORT: posix_acl: Clear SGID bit when setting file permissions	2017-02-07 15:21:07 +00:00
kernfs	kernfs: implement kernfs_path_len()	2015-08-18 15:49:15 -07:00
lockd	Mainly smaller bugfixes and cleanup. We're still finding some bugs from	2015-11-11 20:11:28 -08:00
logfs	mm, fs: introduce mapping_gfp_constraint()	2015-11-06 17:50:42 -08:00
minix
ncpfs	ncpfs: don't allow negative timeouts	2015-11-20 16:17:32 -08:00
nfs	sched/wait: Fix the signal handling fix	2015-12-13 14:30:59 -08:00
nfs_common	lockd: NLM grace period shouldn't block NFSv4 opens	2015-08-13 10:22:06 -04:00
nfsd	nfsd: don't hold ls_mutex across a layout recall	2015-12-16 11:49:58 -05:00
nilfs2	Merge branch 'for-linus-2' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2015-11-11 09:45:24 -08:00
nls
notify	ANDROID: vfs: Add permission2 for filesystems with per mount permissions	2017-01-26 15:53:30 -08:00
ntfs	mm, fs: introduce mapping_gfp_constraint()	2015-11-06 17:50:42 -08:00
ocfs2	BACKPORT: posix_acl: Clear SGID bit when setting file permissions	2017-02-07 15:21:07 +00:00
omfs
openpromfs
overlayfs	ovl: get rid of the dead code left from broken (and disabled) optimizations	2015-12-06 12:31:07 -05:00
proc	UPSTREAM: fs/proc/kcore.c: Add bounce buffer for ktext data	2016-10-05 08:09:43 -07:00
pstore	FROMLIST: pstore: drop pmsg bounce buffer	2016-09-08 14:16:55 -07:00
qnx4
qnx6
quota	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2015-09-05 20:34:28 -07:00
ramfs	mm, fs: obey gfp_mapping for add_to_page_cache()	2015-10-16 11:42:28 -07:00
reiserfs	BACKPORT: posix_acl: Clear SGID bit when setting file permissions	2017-02-07 15:21:07 +00:00
romfs
sdcardfs	ANDROID: sdcardfs: Switch strcasecmp for internal call	2017-02-02 15:17:29 -08:00
squashfs	squashfs: xattr simplifications	2015-11-13 20:34:33 -05:00
sysfs	platform/chrome: Branch for v4.4	2015-11-13 21:53:18 -08:00
sysv	fix sysvfs symlinks	2015-11-23 21:11:08 -05:00
tracefs	tracefs: Fix refcount imbalance in start_creating()	2015-11-04 22:13:45 -05:00
ubifs	Merge branch 'for-linus-3' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2015-11-13 18:02:30 -08:00
udf	udf: Don't modify filesystem for read-only mounts	2015-08-20 14:58:35 +02:00
ufs	fix ufs write vs readpage race when writing into a hole	2015-09-09 10:43:12 -07:00
xfs	BACKPORT: posix_acl: Clear SGID bit when setting file permissions	2017-02-07 15:21:07 +00:00
aio.c	mm: move ->mremap() from file_operations to vm_operations_struct	2015-09-04 16:54:41 -07:00
anon_inodes.c
attr.c	ANDROID: vfs: Add setattr2 for filesystems with per mount permissions	2017-01-26 15:53:30 -08:00
bad_inode.c
binfmt_aout.c
binfmt_elf.c	FROMLIST: mm: ASLR: use get_random_long()	2016-03-16 16:50:34 -07:00
binfmt_elf_fdpic.c	libnvdimm for 4.4:	2015-11-10 12:07:22 -08:00
binfmt_em86.c
binfmt_flat.c
binfmt_misc.c
binfmt_script.c
block_dev.c	block: detach bdev inode from its wb in __blkdev_put()	2015-12-04 11:02:17 -07:00
buffer.c	vfs: remove unused wrapper block_page_mkwrite()	2015-11-11 02:19:33 -05:00
char_dev.c	fs/char_dev.c: fix incorrect documentation for unregister_chrdev_region	2015-08-05 13:49:35 -07:00
compat.c
compat_binfmt_elf.c
compat_ioctl.c	i2c-dev: Fix typo in ioctl name reference	2015-10-23 23:26:43 +02:00
coredump.c	ANDROID: vfs: Add setattr2 for filesystems with per mount permissions	2017-01-26 15:53:30 -08:00
dax.c	dax: disable pmd mappings	2015-11-16 23:54:45 -08:00
dcache.c	fs: Export d_absolute_path	2016-03-24 10:32:35 -07:00
dcookies.c
direct-io.c	fix the regression from "direct-io: Fix negative return from dio read beyond eof"	2015-12-08 15:02:42 -05:00
drop_caches.c	inode: convert inode_sb_list_lock to per-sb	2015-08-17 18:39:46 -04:00
eventfd.c
eventpoll.c	BACKPORT: timer: convert timer_slack_ns from unsigned long to u64	2016-07-01 18:12:06 -07:00
exec.c	ANDROID: vfs: Add permission2 for filesystems with per mount permissions	2017-01-26 15:53:30 -08:00
fcntl.c
fhandle.c
file.c	vfs: clear remainder of 'full_fds_bits' in dup_fd()	2015-11-05 23:05:32 -08:00
file_table.c	fs, file table: reinit files_stat.max_files after deferred memory initialisation	2015-08-07 04:39:40 +03:00
filesystems.c
fs-writeback.c	fs: block_dump: Don't display inode changes if block_dump < 2	2016-02-16 13:51:11 -08:00
fs_pin.c
fs_struct.c	ANDROID: fs: Export free_fs_struct and set_fs_pwd	2017-01-30 17:59:59 -08:00
inode.c	ANDROID: vfs: Add setattr2 for filesystems with per mount permissions	2017-01-26 15:53:30 -08:00
internal.h	ANDROID: vfs: Allow filesystems to access their private mount data	2017-01-26 15:53:30 -08:00
ioctl.c
Kconfig	Included sdcardfs source code for kernel 3.0	2016-03-22 20:27:13 -07:00
Kconfig.binfmt
libfs.c	fs: Set the size of empty dirs to 0.	2015-08-12 15:28:45 -05:00
locks.c	locks: cleanup posix_lock_inode_wait and flock_lock_inode_wait	2015-10-22 14:57:42 -04:00
Makefile	Included sdcardfs source code for kernel 3.0	2016-03-22 20:27:13 -07:00
mbcache.c
mount.h
mpage.c	ANDROID: fs: FS tracepoints to track IO.	2016-09-20 21:33:24 +00:00
namei.c	ANDROID: fs: Export vfs_rmdir2	2017-01-30 18:00:11 -08:00
namespace.c	ANDROID: vfs: Allow filesystems to access their private mount data	2017-01-26 15:53:30 -08:00
no-block.c
nsfs.c	fs/seq_file: convert int seq_vprint/seq_printf/etc... returns to void	2015-09-11 15:21:34 -07:00
open.c	ANDROID: vfs: Add setattr2 for filesystems with per mount permissions	2017-01-26 15:53:30 -08:00
pipe.c	fs/pipe.c: return error code rather than 0 in pipe_write()	2015-11-11 02:18:26 -05:00
pnode.c	ANDROID: mnt: remount should propagate to slaves of slaves	2017-01-26 15:53:31 -08:00
pnode.h	ANDROID: mnt: remount should propagate to slaves of slaves	2017-01-26 15:53:31 -08:00
posix_acl.c	BACKPORT: posix_acl: Clear SGID bit when setting file permissions	2017-02-07 15:21:07 +00:00
proc_namespace.c	ANDROID: vfs: Allow filesystems to access their private mount data	2017-01-26 15:53:30 -08:00
read_write.c
readdir.c
select.c	BACKPORT: timer: convert timer_slack_ns from unsigned long to u64	2016-07-01 18:12:06 -07:00
seq_file.c	fs, seqfile: always allow oom killer	2015-11-06 17:50:42 -08:00
signalfd.c	signalfd: fix information leak in signalfd_copyinfo	2015-08-07 04:39:40 +03:00
splice.c	vfs: Avoid softlockups with sendfile(2)	2015-11-23 21:15:30 -05:00
stack.c
stat.c	fs/stat.c: remove unnecessary new_valid_dev() check	2015-11-09 15:11:24 -08:00
statfs.c
super.c	ANDROID: vfs: Allow filesystems to access their private mount data	2017-01-26 15:53:30 -08:00
sync.c	fs/sync.c: make sync_file_range(2) use WB_SYNC_NONE writeback	2015-11-06 17:50:42 -08:00
timerfd.c
userfaultfd.c	userfaultfd: Add missing vma_merge parameter	2016-02-16 13:54:16 -08:00
utimes.c	ANDROID: vfs: Add setattr2 for filesystems with per mount permissions	2017-01-26 15:53:30 -08:00
xattr.c	9p: xattr simplifications	2015-11-13 20:34:33 -05:00