1. 25 10月, 2011 1 次提交
    • N
      NFS/sunrpc: don't use a credential with extra groups. · dc6f55e9
      NeilBrown 提交于
      The sunrpc layer keeps a cache of recently used credentials and
      'unx_match' is used to find the credential which matches the current
      process.
      
      However unx_match allows a match when the cached credential has extra
      groups at the end of uc_gids list which are not in the process group list.
      
      So if a process with a list of (say) 4 group accesses a file and gains
      access because of the last group in the list, then another process
      with the same uid and gid, and a gid list being the first tree of the
      gids of the original process tries to access the file, it will be
      granted access even though it shouldn't as the wrong rpc credential
      will be used.
      Signed-off-by: NNeilBrown <neilb@suse.de>
      Signed-off-by: NTrond Myklebust <Trond.Myklebust@netapp.com>
      Cc: stable@vger.kernel.org
      dc6f55e9
  2. 21 10月, 2011 1 次提交
  3. 20 10月, 2011 6 次提交
  4. 19 10月, 2011 19 次提交
  5. 18 10月, 2011 1 次提交
  6. 17 10月, 2011 2 次提交
  7. 15 10月, 2011 4 次提交
  8. 14 10月, 2011 6 次提交