]> git.karo-electronics.de Git - karo-tx-linux.git/commit
eCryptfs: Clear LOOKUP_OPEN flag when creating lower file
authorTyler Hicks <tyhicks@linux.vnet.ibm.com>
Thu, 23 Sep 2010 07:35:04 +0000 (02:35 -0500)
committerPaul Gortmaker <paul.gortmaker@windriver.com>
Sun, 17 Apr 2011 20:15:42 +0000 (16:15 -0400)
commit926f9465de9ac6f73efb570206c96d9d16b535f8
treedabea10b799973b24444e6215adcd8f1dfc0e3aa
parentbc8740957d581415f10aff74a6ebf08d908cf670
eCryptfs: Clear LOOKUP_OPEN flag when creating lower file

commit 2e21b3f124eceb6ab5a07c8a061adce14ac94e14 upstream.

eCryptfs was passing the LOOKUP_OPEN flag through to the lower file
system, even though ecryptfs_create() doesn't support the flag. A valid
filp for the lower filesystem could be returned in the nameidata if the
lower file system's create() function supported LOOKUP_OPEN, possibly
resulting in unencrypted writes to the lower file.

However, this is only a potential problem in filesystems (FUSE, NFS,
CIFS, CEPH, 9p) that eCryptfs isn't known to support today.

https://bugs.launchpad.net/ecryptfs/+bug/641703

Reported-by: Kevin Buhr
Signed-off-by: Tyler Hicks <tyhicks@linux.vnet.ibm.com>
Signed-off-by: Paul Gortmaker <paul.gortmaker@windriver.com>
fs/ecryptfs/inode.c