David Sterba d024206133 btrfs: restrict snapshotting to own subvolumes ... Currently, any user can snapshot any subvolume if the path is accessible and thus indirectly create and keep files he does not own under his direcotries. This is not possible with traditional directories. In security context, a user can snapshot root filesystem and pin any potentially buggy binaries, even if the updates are applied. All the snapshots are visible to the administrator, so it's possible to verify if there are suspicious snapshots. Another more practical problem is that any user can pin the space used by eg. root and cause ENOSPC. Original report: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/484786 CC: stable@vger.kernel.org Signed-off-by: David Sterba <dsterba@suse.cz> Signed-off-by: Josef Bacik <jbacik@fb.com> Signed-off-by: Chris Mason <clm@fb.com>		2014-01-28 13:20:40 -08:00
..
tests	Btrfs: convert printk to btrfs_ and fix BTRFS prefix	2014-01-28 13:20:05 -08:00
acl.c	btrfs: remove dead code	2014-01-28 13:19:50 -08:00
async-thread.c	Btrfs: fix __btrfs_start_workers retval	2013-11-20 20:42:11 -05:00
async-thread.h	Btrfs: eliminate races in worker stopping code	2013-10-04 16:02:13 -04:00
backref.c	Btrfs: only process as many file extents as there are refs	2014-01-28 13:20:28 -08:00
backref.h	Btrfs: allocate prelim_ref with a slab allocater	2013-09-01 08:16:27 -04:00
btrfs_inode.h	Btrfs: add support for inode properties	2014-01-28 13:20:24 -08:00
check-integrity.c	Btrfs: fix check-integrity to look at the referenced data properly	2014-01-28 13:19:21 -08:00
check-integrity.h	block: submit_bio_wait() conversions	2013-11-24 16:33:41 -07:00
compression.c	Btrfs: convert printk to btrfs_ and fix BTRFS prefix	2014-01-28 13:20:05 -08:00
compression.h	btrfs: make static code static & remove dead code	2013-05-06 15:55:23 -04:00
ctree.c	Btrfs: fix to search previous metadata extent item since skinny metadata	2014-01-28 13:20:33 -08:00
ctree.h	Btrfs: change the members' order of btrfs_space_info structure to reduce the cache miss	2014-01-28 13:20:38 -08:00
delayed-inode.c	Btrfs: introduce the delayed inode ref deletion for the single link inode	2014-01-28 13:20:09 -08:00
delayed-inode.h	Btrfs: introduce the delayed inode ref deletion for the single link inode	2014-01-28 13:20:09 -08:00
delayed-ref.c	Btrfs: attach delayed ref updates to delayed ref heads	2014-01-28 13:20:25 -08:00
delayed-ref.h	Btrfs: attach delayed ref updates to delayed ref heads	2014-01-28 13:20:25 -08:00
dev-replace.c	Btrfs: convert printk to btrfs_ and fix BTRFS prefix	2014-01-28 13:20:05 -08:00
dev-replace.h
dir-item.c	Btrfs: convert printk to btrfs_ and fix BTRFS prefix	2014-01-28 13:20:05 -08:00
disk-io.c	Btrfs: fix extent state leak on transaction abortion	2014-01-28 13:20:35 -08:00
disk-io.h	Btrfs: add a sanity test for btrfs_split_item	2013-11-11 21:51:02 -05:00
export.c	btrfs: remove fs/btrfs/compat.h	2013-11-11 22:03:19 -05:00
export.h
extent-tree.c	Btrfs: fix wrong block group in trace during the free space allocation	2014-01-28 13:20:40 -08:00
extent_io.c	Btrfs: convert printk to btrfs_ and fix BTRFS prefix	2014-01-28 13:20:05 -08:00
extent_io.h	Btrfs: move the extent buffer radix tree into the fs_info	2014-01-28 13:19:55 -08:00
extent_map.c	Btrfs: fix extent_map block_len after merging	2014-01-28 13:19:51 -08:00
extent_map.h	btrfs: Enclose macros with complex values within parenthesis	2013-11-11 22:12:06 -05:00
file-item.c	Btrfs: convert printk to btrfs_ and fix BTRFS prefix	2014-01-28 13:20:05 -08:00
file.c	Btrfs: fix the race between write back and nocow buffered write	2014-01-28 13:20:28 -08:00
free-space-cache.c	Btrfs: convert printk to btrfs_ and fix BTRFS prefix	2014-01-28 13:20:05 -08:00
free-space-cache.h	Btrfs: remove path arg from btrfs_truncate_free_space_cache	2013-11-11 21:51:33 -05:00
hash.c	Btrfs: fix btrfs boot when compiled as built-in	2014-01-28 13:20:31 -08:00
hash.h	Btrfs: fix btrfs boot when compiled as built-in	2014-01-28 13:20:31 -08:00
inode-item.c	btrfs: cleanup: removed unused 'btrfs_get_inode_ref_index'	2014-01-28 13:19:39 -08:00
inode-map.c	btrfs: Use WARN_ON()'s return value in place of WARN_ON(1)	2013-11-11 22:11:53 -05:00
inode-map.h
inode.c	Btrfs: fix transaction abortion when remounting btrfs from RW to RO	2014-01-28 13:20:36 -08:00
ioctl.c	btrfs: restrict snapshotting to own subvolumes	2014-01-28 13:20:40 -08:00
Kconfig	Btrfs: fix btrfs boot when compiled as built-in	2014-01-28 13:20:31 -08:00
locking.c	btrfs: make static code static & remove dead code	2013-05-06 15:55:23 -04:00
locking.h
lzo.c	Btrfs: convert printk to btrfs_ and fix BTRFS prefix	2014-01-28 13:20:05 -08:00
Makefile	Btrfs: fix btrfs boot when compiled as built-in	2014-01-28 13:20:31 -08:00
math.h
ordered-data.c	Btrfs: convert printk to btrfs_ and fix BTRFS prefix	2014-01-28 13:20:05 -08:00
ordered-data.h	Btrfs: don't wait for the completion of all the ordered extents	2013-11-11 22:13:44 -05:00
orphan.c	btrfs: expand btrfs_find_item() to include find_orphan_item functionality	2014-01-28 13:19:37 -08:00
print-tree.c	Btrfs: convert printk to btrfs_ and fix BTRFS prefix	2014-01-28 13:20:05 -08:00
print-tree.h	btrfs: make static code static & remove dead code	2013-05-06 15:55:23 -04:00
props.c	Btrfs: add support for inode properties	2014-01-28 13:20:24 -08:00
props.h	Btrfs: add support for inode properties	2014-01-28 13:20:24 -08:00
qgroup.c	Btrfs: fix qgroup rescan to work with skinny metadata	2014-01-28 13:20:27 -08:00
raid56.c	btrfs: remove fs/btrfs/compat.h	2013-11-11 22:03:19 -05:00
raid56.h
rcu-string.h
reada.c	Btrfs: convert printk to btrfs_ and fix BTRFS prefix	2014-01-28 13:20:05 -08:00
relocation.c	Btrfs: fix an oops when we fail to relocate tree blocks	2014-01-28 13:20:14 -08:00
root-tree.c	Btrfs: convert printk to btrfs_ and fix BTRFS prefix	2014-01-28 13:20:05 -08:00
scrub.c	Btrfs: fix to search previous metadata extent item since skinny metadata	2014-01-28 13:20:33 -08:00
send.c	Btrfs: fix wrong search path initialization before searching tree root	2014-01-28 13:20:37 -08:00
send.h	btrfs: make static code static & remove dead code	2013-05-06 15:55:23 -04:00
struct-funcs.c
super.c	btrfs: Cleanup the btrfs_parse_options for remount.	2014-01-28 13:20:34 -08:00
sysfs.c	Btrfs: convert printk to btrfs_ and fix BTRFS prefix	2014-01-28 13:20:05 -08:00
sysfs.h	btrfs: publish allocation data in sysfs	2014-01-28 13:19:29 -08:00
transaction.c	btrfs: Add noinode_cache mount option	2014-01-28 13:20:33 -08:00
transaction.h	Btrfs: make fsync latency less sucky	2014-01-28 13:20:25 -08:00
tree-defrag.c	Btrfs: cleanup dead code of defragment	2013-11-11 21:59:45 -05:00
tree-log.c	Btrfs: flush the dirty pages of the ordered extent aggressively during logging csum	2014-01-28 13:20:37 -08:00
tree-log.h	btrfs: make static code static & remove dead code	2013-05-06 15:55:23 -04:00
ulist.c	Btrfs: optimize to remove unnecessary removal with ulist reallocation	2014-01-28 13:20:30 -08:00
ulist.h	Btrfs: add a rb_tree to improve performance of ulist search	2013-05-06 15:54:44 -04:00
uuid-tree.c	Btrfs: convert printk to btrfs_ and fix BTRFS prefix	2014-01-28 13:20:05 -08:00
volumes.c	Btrfs: convert printk to btrfs_ and fix BTRFS prefix	2014-01-28 13:20:05 -08:00
volumes.h	btrfs: Pack struct btrfs_device	2013-11-11 22:11:26 -05:00
xattr.c	Btrfs: add support for inode properties	2014-01-28 13:20:24 -08:00
xattr.h
zlib.c	Btrfs: convert printk to btrfs_ and fix BTRFS prefix	2014-01-28 13:20:05 -08:00