Commit 50530970 authored by Miklos Szeredi's avatar Miklos Szeredi Committed by Cheng Jian
Browse files

ovl: call secutiry hook in ovl_real_ioctl()



mainline inclusion
from mainline-v5.8-rc1
commit 292f902a
category: bugfix
bugzilla: NA
CVE: CVE-2020-16120

--------------------------------

Verify LSM permissions for underlying file, since vfs_ioctl() doesn't do
it.

[Stephen Rothwell] export security_file_ioctl

Signed-off-by: default avatarMiklos Szeredi <mszeredi@redhat.com>
Conflicts:
  fs/overlayfs/file.c
[yyl: adjust context]
Signed-off-by: default avatarYang Yingliang <yangyingliang@huawei.com>
Reviewed-by: default avatarzhangyi (F) <yi.zhang@huawei.com>
Signed-off-by: default avatarYang Yingliang <yangyingliang@huawei.com>
Signed-off-by: default avatarCheng Jian <cj.chengjian@huawei.com>
parent 7018efa1
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment