From: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com>
Rebased to vz9: - ve_capable is moved to vfs_mknod becase due to ms commit a3c751a50fe6 ("vfs: allow unprivileged whiteout creation") (cherry picked from commit vz8 ea5765973b0087b555d608622b4ad6a676395b23) Signed-off-by: Andrey Zhadchenko <andrey.zhadche...@virtuozzo.com> --- fs/namei.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fs/namei.c b/fs/namei.c index bf6d8a7..8eee5ad 100644 --- a/fs/namei.c +++ b/fs/namei.c @@ -3687,7 +3687,7 @@ int vfs_mknod(struct user_namespace *mnt_userns, struct inode *dir, return error; if ((S_ISCHR(mode) || S_ISBLK(mode)) && !is_whiteout && - !capable(CAP_MKNOD)) + !ve_capable(CAP_MKNOD)) return -EPERM; if (!dir->i_op->mknod) -- 1.8.3.1 _______________________________________________ Devel mailing list Devel@openvz.org https://lists.openvz.org/mailman/listinfo/devel