[f2fs-dev] [PATCH 6.1] f2fs: Require FMODE_WRITE for atomic write ioctls

2024-10-04 Thread Eric Biggers via Linux-f2fs-devel
From: Jann Horn commit 4f5a100f87f32cb65d4bb1ad282a08c92f6f591e upstream. The F2FS ioctls for starting and committing atomic writes check for inode_owner_or_capable(), but this does not give LSMs like SELinux or Landlock an opportunity to deny the write access - if the caller's FSUID matches the

[f2fs-dev] [PATCH 5.15] f2fs: Require FMODE_WRITE for atomic write ioctls

2024-10-04 Thread Eric Biggers via Linux-f2fs-devel
From: Jann Horn commit 4f5a100f87f32cb65d4bb1ad282a08c92f6f591e upstream. The F2FS ioctls for starting and committing atomic writes check for inode_owner_or_capable(), but this does not give LSMs like SELinux or Landlock an opportunity to deny the write access - if the caller's FSUID matches the

[f2fs-dev] [PATCH 5.4] f2fs: Require FMODE_WRITE for atomic write ioctls

2024-10-04 Thread Eric Biggers via Linux-f2fs-devel
From: Jann Horn commit 4f5a100f87f32cb65d4bb1ad282a08c92f6f591e upstream. The F2FS ioctls for starting and committing atomic writes check for inode_owner_or_capable(), but this does not give LSMs like SELinux or Landlock an opportunity to deny the write access - if the caller's FSUID matches the

[f2fs-dev] [PATCH 5.10] f2fs: Require FMODE_WRITE for atomic write ioctls

2024-10-04 Thread Eric Biggers via Linux-f2fs-devel
From: Jann Horn commit 4f5a100f87f32cb65d4bb1ad282a08c92f6f591e upstream. The F2FS ioctls for starting and committing atomic writes check for inode_owner_or_capable(), but this does not give LSMs like SELinux or Landlock an opportunity to deny the write access - if the caller's FSUID matches the

[f2fs-dev] [PATCH 4.19] f2fs: Require FMODE_WRITE for atomic write ioctls

2024-10-04 Thread Eric Biggers via Linux-f2fs-devel
From: Jann Horn commit 4f5a100f87f32cb65d4bb1ad282a08c92f6f591e upstream. The F2FS ioctls for starting and committing atomic writes check for inode_owner_or_capable(), but this does not give LSMs like SELinux or Landlock an opportunity to deny the write access - if the caller's FSUID matches the