userns: fix return value on mntns_install() failure

Change return value from -EINVAL to -EPERM when the permission check fails.

Signed-off-by: Zhao Hongjiang <zhaohongjiang@huawei.com>
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>

diff --git a/fs/namespace.c b/fs/namespace.c
index 9ddc86f93221ff528093b65e3f9e6626ba81c283..cab78a74aca3534f5bac93d7a41c5a7972389df0 100644 (file)
--- a/fs/namespace.c
+++ b/fs/namespace.c
@@ -2775,7 +2775,7 @@ static int mntns_install(struct nsproxy *nsproxy, void *ns)
 
        if (!ns_capable(mnt_ns->user_ns, CAP_SYS_ADMIN) ||
            !nsown_capable(CAP_SYS_CHROOT))
-               return -EINVAL;
+               return -EPERM;
 
        if (fs->users != 1)
                return -EINVAL;