Re: [PATCH 1/5] ext4: preserve i_mode if __ext4_set_acl() fails
Theodore Ts'o <[email protected]>
| Newsgroups | gmane.comp.file-systems.jfs.general |
|---|---|
| Message-ID | <20170731024447.h4fiawhm6lcavahk__37725.6804299124$1501470695$gmane$org@thunk.org> |
On Wed, Jul 12, 2017 at 06:53:51AM -0300, Ernesto A. Fernández wrote: > When changing a file's acl mask, __ext4_set_acl() will first set the group > bits of i_mode to the value of the mask, and only then set the actual > extended attribute representing the new acl. > > If the second part fails (due to lack of space, for example) and the file > had no acl attribute to begin with, the system will from now on assume > that the mask permission bits are actual group permission bits, potentially > granting access to the wrong users. > > Prevent this by only changing the inode mode after the acl has been set. > > Signed-off-by: Ernesto A. Fernández <[email protected]> Thanks, applied. - Ted ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot