Al Viro 1982e18bbc use uniform permission checks for all mount propagation changes ... [ Upstream commit cffd044187 ] do_change_type() and do_set_group() are operating on different aspects of the same thing - propagation graph. The latter asks for mounts involved to be mounted in namespace(s) the caller has CAP_SYS_ADMIN for. The former is a mess - originally it didn't even check that mount *is* mounted. That got fixed, but the resulting check turns out to be too strict for userland - in effect, we check that mount is in our namespace, having already checked that we have CAP_SYS_ADMIN there. What we really need (in both cases) is * only touch mounts that are mounted. That's a must-have constraint - data corruption happens if it get violated. * don't allow to mess with a namespace unless you already have enough permissions to do so (i.e. CAP_SYS_ADMIN in its userns). That's an equivalent of what do_set_group() does; let's extract that into a helper (may_change_propagation()) and use it in both do_set_group() and do_change_type(). Fixes: 12f147ddd6 "do_change_type(): refuse to operate on unmounted/not ours mounts" Acked-by: Andrei Vagin <avagin@gmail.com> Reviewed-by: Pavel Tikhomirov <ptikhomirov@virtuozzo.com> Tested-by: Pavel Tikhomirov <ptikhomirov@virtuozzo.com> Reviewed-by: Christian Brauner <brauner@kernel.org> Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> Signed-off-by: Sasha Levin <sashal@kernel.org>		2025-08-28 16:28:44 +02:00
..
9p
adfs
affs	affs: don't write overlarge OFS data block size fields	2025-04-10 14:37:37 +02:00
afs
autofs
befs
bfs
btrfs	btrfs: send: make fs_path_len() inline and constify its argument	2025-08-28 16:28:41 +02:00
cachefiles	cachefiles: Fix the incorrect return value in __cachefiles_write()	2025-07-24 08:53:16 +02:00
ceph	ceph: fix possible integer overflow in ceph_zero_objects()	2025-07-06 11:00:08 +02:00
coda
configfs	configfs: Do not override creating attribute file failure in populate_attrs()	2025-06-27 11:08:42 +01:00
cramfs
crypto	fscrypt: Don't use problematic non-inline crypto engines	2025-08-28 16:28:40 +02:00
debugfs
devpts
dlm	dlm: make tcp still work in multi-link env	2025-06-04 14:41:57 +02:00
ecryptfs
efivarfs
efs
erofs	erofs: address D-cache aliasing	2025-08-01 09:47:32 +01:00
exfat	exfat: add cluster chain loop check for dir	2025-08-28 16:28:28 +02:00
exportfs
ext2	ext2: Handle fiemap on empty files to prevent EINVAL	2025-08-28 16:28:15 +02:00
ext4	ext4: preserve SB_I_VERSION on remount	2025-08-28 16:28:44 +02:00
f2fs	f2fs: fix to avoid out-of-boundary access in dnode page	2025-08-28 16:28:36 +02:00
fat
freevxfs
fscache
fuse	fuse: fix race between concurrent setattrs from multiple nodes	2025-07-06 11:00:06 +02:00
gfs2	gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops	2025-08-28 16:28:15 +02:00
hfs	hfs: fix not erasing deleted b-tree node issue	2025-08-28 16:28:15 +02:00
hfsplus	hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()	2025-08-28 16:28:14 +02:00
hostfs	um: hostfs: avoid issues on inode number reuse by host	2025-04-10 14:37:34 +02:00
hpfs
hugetlbfs	mm: update memfd seal write check to include F_SEAL_WRITE	2025-08-28 16:28:39 +02:00
iomap	iomap: skip unnecessary ifs_block_is_uptodate check	2025-05-02 07:51:01 +02:00
isofs	isofs: Verify inode mode when loading from disk	2025-07-24 08:53:13 +02:00
jbd2	jbd2: prevent softlockup in jbd2_log_do_checkpoint()	2025-08-28 16:28:36 +02:00
jffs2	jffs2: check jffs2_prealloc_raw_node_refs() result in few other places	2025-06-27 11:08:58 +01:00
jfs	jfs: upper bound check of tree index in dbAllocAG	2025-08-28 16:28:26 +02:00
kernfs	kernfs: Relax constraint in draining guard	2025-06-19 15:28:16 +02:00
lockd
minix
netfs
nfs	pNFS: Fix uninited ptr deref in block/scsi layout	2025-08-28 16:28:30 +02:00
nfs_common
nfsd	NFSD: detect mismatch of file handle and delegation stateid in OPEN op	2025-08-28 16:28:11 +02:00
nilfs2	nilfs2: reject invalid file types when reading inodes	2025-08-01 09:47:30 +01:00
nls
notify	fanotify: sanitize handle_type values when reporting fid	2025-08-15 12:08:52 +02:00
ntfs
ntfs3	fs/ntfs3: correctly create symlink for relative path	2025-08-28 16:28:15 +02:00
ocfs2	ocfs2: fix possible memory leak in ocfs2_finish_quota_recovery	2025-06-19 15:28:23 +02:00
omfs
openpromfs
orangefs	fs/orangefs: use snprintf() instead of sprintf()	2025-08-28 16:28:25 +02:00
overlayfs	ovl: Check for NULL d_inode() in ovl_dentry_upper()	2025-07-06 11:00:08 +02:00
proc	proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al	2025-08-15 12:08:54 +02:00
pstore	pstore: Change kmsg_bytes storage size to u32	2025-06-04 14:42:11 +02:00
qnx4
qnx6
quota
ramfs
reiserfs
romfs
smb	smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()	2025-08-28 16:28:44 +02:00
squashfs	squashfs: fix memory leak in squashfs_fill_super	2025-08-28 16:28:43 +02:00
sysfs
sysv
tracefs	tracefs: Add d_delete to remove negative dentries	2025-08-28 16:28:15 +02:00
ubifs
udf	udf: Verify partition map count	2025-08-28 16:28:15 +02:00
ufs
unicode
vboxsf
verity
xfs	xfs: fully decouple XFS_IBULK* flags from XFS_IWALK* flags	2025-08-28 16:28:40 +02:00
zonefs
aio.c
anon_inodes.c	fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass	2025-07-10 16:03:18 +02:00
attr.c
bad_inode.c
binfmt_elf_fdpic.c
binfmt_elf_test.c
binfmt_elf.c	binfmt_elf: Move brk for static PIE even if ASLR disabled	2025-05-22 14:12:12 +02:00
binfmt_flat.c
binfmt_misc.c
binfmt_script.c
buffer.c	fs/buffer: fix use-after-free when call bh_read() helper	2025-08-28 16:28:44 +02:00
char_dev.c
compat_binfmt_elf.c
coredump.c	coredump: hand a pidfd to the usermode coredump helper	2025-06-04 14:42:24 +02:00
d_path.c
dax.c
dcache.c
direct-io.c
drop_caches.c
eventfd.c
eventpoll.c	eventpoll: Fix semi-unbounded recursion	2025-08-28 16:28:12 +02:00
exec.c	exec: fix the racy usage of fs_struct->in_exec	2025-04-10 14:37:44 +02:00
fcntl.c
fhandle.c
file_table.c
file.c	fs: Prevent file descriptor table allocations exceeding INT_MAX	2025-08-28 16:28:12 +02:00
filesystems.c	fs/filesystems: Fix potential unsigned integer underflow in fs_name()	2025-06-19 15:28:43 +02:00
fs_context.c
fs_parser.c
fs_pin.c
fs_struct.c
fs_types.c
fs-writeback.c
fsopen.c
init.c
inode.c
internal.h
ioctl.c
Kconfig	nfs: add missing selections of CONFIG_CRC32	2025-04-25 10:45:46 +02:00
Kconfig.binfmt
kernel_read_file.c
libfs.c	better lockdep annotations for simple_recursive_removal()	2025-08-28 16:28:15 +02:00
locks.c
Makefile
mbcache.c
mnt_idmapping.c
mount.h
mpage.c
namei.c
namespace.c	use uniform permission checks for all mount propagation changes	2025-08-28 16:28:44 +02:00
nsfs.c
open.c
pipe.c
pnode.c
pnode.h
posix_acl.c
proc_namespace.c
read_write.c
readdir.c
remap_range.c
select.c
seq_file.c
signalfd.c
splice.c	splice: remove duplicate noinline from pipe_clear_nowait	2025-05-02 07:50:45 +02:00
stack.c
stat.c
statfs.c
super.c
sync.c
sysctls.c
timerfd.c
userfaultfd.c	mm/userfaultfd: fix release hang over concurrent GUP	2025-04-25 10:45:31 +02:00
utimes.c
xattr.c	fs/xattr.c: fix simple_xattr_list()	2025-06-27 11:08:57 +01:00