Jan Kara 57c9cfdb61 posix_acl: Clear SGID bit when setting file permissions ... commit 073931017b49d9458aa351605b43a7e34598caef upstream. When file permissions are modified via chmod(2) and the user is not in the owning group or capable of CAP_FSETID, the setgid bit is cleared in inode_change_ok(). Setting a POSIX ACL via setxattr(2) sets the file permissions as well as the new ACL, but doesn't clear the setgid bit in a similar way; this allows to bypass the check in chmod(2). Fix that. References: CVE-2016-7097 Reviewed-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Jeff Layton <jlayton@redhat.com> Signed-off-by: Jan Kara <jack@suse.cz> Signed-off-by: Andreas Gruenbacher <agruenba@redhat.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2016-10-31 04:13:58 -06:00
..
acl.c	posix_acl: Clear SGID bit when setting file permissions	2016-10-31 04:13:58 -06:00
acl.h
cache.c
cache.h	fs: 9p: cache.h: Add #define of include guard	2015-11-11 02:19:50 -05:00
fid.c
fid.h
Kconfig
Makefile	9p: xattr simplifications	2015-11-13 20:34:33 -05:00
v9fs.c
v9fs.h
v9fs_vfs.h
vfs_addr.c
vfs_dentry.c
vfs_dir.c
vfs_file.c	9p: use file_dentry()	2016-08-10 11:49:27 +02:00
vfs_inode.c	9p: ->evict_inode() should kick out ->i_data, not ->i_mapping	2015-12-08 14:51:16 -05:00
vfs_inode_dotl.c
vfs_super.c
xattr.c	9p: xattr simplifications	2015-11-13 20:34:33 -05:00
xattr.h	9p: xattr simplifications	2015-11-13 20:34:33 -05:00