Serge E. Hallyn 7ea6600148 generic_permission: MAY_OPEN is not write access ... generic_permission was refusing CAP_DAC_READ_SEARCH-enabled processes from opening DAC-protected files read-only, because do_filp_open adds MAY_OPEN to the open mask. Ignore MAY_OPEN. After this patch, CAP_DAC_READ_SEARCH is again sufficient to open(fname, O_RDONLY) on a file to which DAC otherwise refuses us read permission. Reported-by: Mike Kazantsev <mk.fraggod@gmail.com> Signed-off-by: Serge E. Hallyn <serue@us.ibm.com> Tested-by: Mike Kazantsev <mk.fraggod@gmail.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2009-12-30 12:35:44 -08:00
..
9p
adfs
affs
afs
autofs
autofs4
befs
bfs
btrfs	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mason/btrfs-unstable	2009-12-17 16:01:03 -08:00
cachefiles
cifs
coda
configfs
cramfs
debugfs
devpts
dlm
ecryptfs	fsstack/ecryptfs: remove unused get_nlinks param to fsstack_copy_attr_all	2009-12-17 10:57:30 -05:00
efs
exofs
exportfs
ext2	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs-2.6	2009-12-16 12:04:02 -08:00
ext3	ext3: Replace lock/unlock_super() with an explicit lock for resizing	2009-12-23 13:44:12 +01:00
ext4	ext4: fix sleep inside spinlock issue with quota and dealloc (#14739)	2009-12-23 13:44:12 +01:00
fat
freevxfs
fscache
fuse
gfs2	Revert "task_struct: make journal_info conditional"	2009-12-17 13:23:24 -08:00
hfs
hfsplus
hostfs
hpfs
hppfs
hugetlbfs
isofs
jbd	jbd: jbd-debug and jbd2-debug should be writable	2009-12-23 13:44:13 +01:00
jbd2	jbd: jbd-debug and jbd2-debug should be writable	2009-12-23 13:44:13 +01:00
jffs2	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs-2.6	2009-12-16 12:04:02 -08:00
jfs	jfs: Fix 32bit build warning	2009-12-22 12:27:35 -05:00
lockd
minix
ncpfs
nfs	Revert "fix mismerge with Trond's stuff (create_mnt_ns() export is gone now)"	2009-12-17 12:51:05 -08:00
nfs_common
nfsd	nfsd: fix "insecure" export option	2009-12-20 20:19:51 -08:00
nilfs2	Revert "task_struct: make journal_info conditional"	2009-12-17 13:23:24 -08:00
nls
notify
ntfs	kill I_LOCK	2009-12-17 11:03:25 -05:00
ocfs2	Merge branch 'upstream-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jlbec/ocfs2	2009-12-24 12:59:11 -08:00
omfs
openpromfs
partitions
proc	Merge branch 'sched-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip	2009-12-19 09:47:49 -08:00
qnx4
quota	quota: Improve checking of quota file header	2009-12-23 13:44:13 +01:00
ramfs	nommu: ramfs: remove unused local var	2009-12-17 15:45:31 -08:00
reiserfs	reiserfs: truncate blocks not used by a write	2009-12-17 15:45:30 -08:00
romfs
smbfs
squashfs
sysfs	Driver core: bin_attribute parameters can often be const*	2009-12-23 11:23:43 -08:00
sysv
ubifs	kill I_LOCK	2009-12-17 11:03:25 -05:00
udf
ufs
xfs	kill I_LOCK	2009-12-17 11:03:25 -05:00
aio.c
anon_inodes.c	Sanitize f_flags helpers	2009-12-22 12:27:34 -05:00
attr.c
bad_inode.c
binfmt_aout.c	mm: introduce coredump parameter structure	2009-12-17 15:45:31 -08:00
binfmt_elf_fdpic.c	mm: introduce coredump parameter structure	2009-12-17 15:45:31 -08:00
binfmt_elf.c	mm: introduce coredump parameter structure	2009-12-17 15:45:31 -08:00
binfmt_em86.c
binfmt_flat.c	mm: introduce coredump parameter structure	2009-12-17 15:45:31 -08:00
binfmt_misc.c
binfmt_script.c
binfmt_som.c	mm: introduce coredump parameter structure	2009-12-17 15:45:31 -08:00
bio-integrity.c
bio.c
block_dev.c
buffer.c
char_dev.c
compat_binfmt_elf.c
compat_ioctl.c	fs/compat_ioctl.c: fix build error when !BLOCK	2009-12-22 12:27:33 -05:00
compat.c
dcache.c
dcookies.c
direct-io.c	dio: fix use-after-free	2009-12-17 04:52:13 -05:00
drop_caches.c
eventfd.c	anonfd: Allow making anon files read-only	2009-12-22 12:27:34 -05:00
eventpoll.c	anonfd: Allow making anon files read-only	2009-12-22 12:27:34 -05:00
exec.c	mm: introduce coredump parameter structure	2009-12-17 15:45:31 -08:00
fcntl.c
fifo.c
file_table.c	alloc_file(): simplify handling of mnt_clone_write() errors	2009-12-22 12:27:33 -05:00
file.c
filesystems.c
fs_struct.c
fs-writeback.c
generic_acl.c
inode.c	kill I_LOCK	2009-12-17 11:03:25 -05:00
internal.h	Fix f_flags/f_mode in case of lookup_instantiate_filp() from open(pathname, 3)	2009-12-22 12:27:34 -05:00
ioctl.c
ioprio.c
Kconfig	Revert "task_struct: make journal_info conditional"	2009-12-17 13:23:24 -08:00
Kconfig.binfmt
libfs.c
locks.c
Makefile
mbcache.c
mpage.c
namei.c	generic_permission: MAY_OPEN is not write access	2009-12-30 12:35:44 -08:00
namespace.c	Revert "fix mismerge with Trond's stuff (create_mnt_ns() export is gone now)"	2009-12-17 12:51:05 -08:00
nfsctl.c
no-block.c
open.c	Sanitize f_flags helpers	2009-12-22 12:27:34 -05:00
pipe.c	fs: no games with DCACHE_UNHASHED	2009-12-17 10:51:40 -05:00
pnode.c
pnode.h
posix_acl.c
read_write.c
read_write.h
readdir.c
select.c
seq_file.c
signalfd.c	anonfd: Allow making anon files read-only	2009-12-22 12:27:34 -05:00
splice.c
stack.c	VFS/fsstack: handle 32-bit smp + preempt + large files in fsstack_copy_inode_size	2009-12-17 10:58:17 -05:00
stat.c	Add unlocked version of inode_add_bytes() function	2009-12-23 13:33:54 +01:00
super.c	vfs: get_sb_single() - do not pass options twice	2009-12-23 11:23:43 -08:00
sync.c	fold do_sync_file_range into sys_sync_file_range	2009-12-17 11:03:25 -05:00
timerfd.c	anonfd: Allow making anon files read-only	2009-12-22 12:27:34 -05:00
utimes.c
xattr_acl.c
xattr.c