提交 267fd057 编写于 作者: A akpm@osdl.org 提交者: Linus Torvalds

[PATCH] remove ext2 xattr permission checks

)

From: Christoph Hellwig <hch@lst.de>

remove checks now in the VFS
Signed-off-by: NChristoph Hellwig <hch@lst.de>
Signed-off-by: NAndrew Morton <akpm@osdl.org>
Signed-off-by: NLinus Torvalds <torvalds@osdl.org>
上级 44a0033f
...@@ -389,10 +389,6 @@ ext2_xattr_set(struct inode *inode, int name_index, const char *name, ...@@ -389,10 +389,6 @@ ext2_xattr_set(struct inode *inode, int name_index, const char *name,
ea_idebug(inode, "name=%d.%s, value=%p, value_len=%ld", ea_idebug(inode, "name=%d.%s, value=%p, value_len=%ld",
name_index, name, value, (long)value_len); name_index, name, value, (long)value_len);
if (IS_RDONLY(inode))
return -EROFS;
if (IS_IMMUTABLE(inode) || IS_APPEND(inode))
return -EPERM;
if (value == NULL) if (value == NULL)
value_len = 0; value_len = 0;
if (name == NULL) if (name == NULL)
......
...@@ -38,8 +38,6 @@ ext2_xattr_trusted_get(struct inode *inode, const char *name, ...@@ -38,8 +38,6 @@ ext2_xattr_trusted_get(struct inode *inode, const char *name,
{ {
if (strcmp(name, "") == 0) if (strcmp(name, "") == 0)
return -EINVAL; return -EINVAL;
if (!capable(CAP_SYS_ADMIN))
return -EPERM;
return ext2_xattr_get(inode, EXT2_XATTR_INDEX_TRUSTED, name, return ext2_xattr_get(inode, EXT2_XATTR_INDEX_TRUSTED, name,
buffer, size); buffer, size);
} }
...@@ -50,8 +48,6 @@ ext2_xattr_trusted_set(struct inode *inode, const char *name, ...@@ -50,8 +48,6 @@ ext2_xattr_trusted_set(struct inode *inode, const char *name,
{ {
if (strcmp(name, "") == 0) if (strcmp(name, "") == 0)
return -EINVAL; return -EINVAL;
if (!capable(CAP_SYS_ADMIN))
return -EPERM;
return ext2_xattr_set(inode, EXT2_XATTR_INDEX_TRUSTED, name, return ext2_xattr_set(inode, EXT2_XATTR_INDEX_TRUSTED, name,
value, size, flags); value, size, flags);
} }
......
...@@ -35,16 +35,10 @@ static int ...@@ -35,16 +35,10 @@ static int
ext2_xattr_user_get(struct inode *inode, const char *name, ext2_xattr_user_get(struct inode *inode, const char *name,
void *buffer, size_t size) void *buffer, size_t size)
{ {
int error;
if (strcmp(name, "") == 0) if (strcmp(name, "") == 0)
return -EINVAL; return -EINVAL;
if (!test_opt(inode->i_sb, XATTR_USER)) if (!test_opt(inode->i_sb, XATTR_USER))
return -EOPNOTSUPP; return -EOPNOTSUPP;
error = permission(inode, MAY_READ, NULL);
if (error)
return error;
return ext2_xattr_get(inode, EXT2_XATTR_INDEX_USER, name, buffer, size); return ext2_xattr_get(inode, EXT2_XATTR_INDEX_USER, name, buffer, size);
} }
...@@ -52,18 +46,10 @@ static int ...@@ -52,18 +46,10 @@ static int
ext2_xattr_user_set(struct inode *inode, const char *name, ext2_xattr_user_set(struct inode *inode, const char *name,
const void *value, size_t size, int flags) const void *value, size_t size, int flags)
{ {
int error;
if (strcmp(name, "") == 0) if (strcmp(name, "") == 0)
return -EINVAL; return -EINVAL;
if (!test_opt(inode->i_sb, XATTR_USER)) if (!test_opt(inode->i_sb, XATTR_USER))
return -EOPNOTSUPP; return -EOPNOTSUPP;
if ( !S_ISREG(inode->i_mode) &&
(!S_ISDIR(inode->i_mode) || inode->i_mode & S_ISVTX))
return -EPERM;
error = permission(inode, MAY_WRITE, NULL);
if (error)
return error;
return ext2_xattr_set(inode, EXT2_XATTR_INDEX_USER, name, return ext2_xattr_set(inode, EXT2_XATTR_INDEX_USER, name,
value, size, flags); value, size, flags);
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册