• Seth Forshee's avatar
    block_dev: Support checking inode permissions in lookup_bdev() · 60bbc16a
    Seth Forshee authored
    When looking up a block device by path no permission check is
    done to verify that the user has access to the block device inode
    at the specified path. In some cases it may be necessary to
    check permissions towards the inode, such as allowing
    unprivileged users to mount block devices in user namespaces.
    
    Add an argument to lookup_bdev() to optionally perform this
    permission check. A value of 0 skips the permission check and
    behaves the same as before. A non-zero value specifies the mask
    of access rights required towards the inode at the specified
    path. The check is always skipped if the user has CAP_SYS_ADMIN.
    
    All callers of lookup_bdev() currently pass a mask of 0, so this
    patch results in no functional change. Subsequent patches will
    add permission checks where appropriate.
    Signed-off-by: default avatarSeth Forshee <seth.forshee@canonical.com>
    60bbc16a
super.c 49.5 KB