Christian Brauner 6697f29bf5 ceph: fix up non-directory creation in SGID directories ... commit fd84bfdddd169c219c3a637889a8b87f70a072c2 upstream. Ceph always inherits the SGID bit if it is set on the parent inode, while the generic inode_init_owner does not do this in a few cases where it can create a possible security problem (cf. [1]). Update ceph to strip the SGID bit just as inode_init_owner would. This bug was detected by the mapped mount testsuite in [3]. The testsuite tests all core VFS functionality and semantics with and without mapped mounts. That is to say it functions as a generic VFS testsuite in addition to a mapped mount testsuite. While working on mapped mount support for ceph, SIGD inheritance was the only failing test for ceph after the port. The same bug was detected by the mapped mount testsuite in XFS in January 2021 (cf. [2]). [1]: commit 0fa3ecd878 ("Fix up non-directory creation in SGID directories") [2]: commit 01ea173e103e ("xfs: fix up non-directory creation in SGID directories") [3]: https://git.kernel.org/fs/xfs/xfstests-dev.git Cc: stable@vger.kernel.org Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com> Reviewed-by: Jeff Layton <jlayton@kernel.org> Signed-off-by: Ilya Dryomov <idryomov@gmail.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2021-12-29 12:26:05 +01:00
..
9p	new helper: inode_wrong_type()	2021-09-08 08:49:01 +02:00
adfs
affs
afs	afs: Fix updating of i_blocks on file/dir extension	2021-09-30 10:11:01 +02:00
autofs
befs
bfs
btrfs	btrfs: fix double free of anon_dev after failure to create subvolume	2021-12-22 09:30:57 +01:00
cachefiles
ceph	ceph: fix up non-directory creation in SGID directories	2021-12-29 12:26:05 +01:00
cifs	smb3: do not error on fsync when readonly	2021-12-01 09:19:08 +01:00
coda
configfs	configfs: fix memleak in configfs_release_bin_file	2021-07-14 16:56:48 +02:00
cramfs
crypto	fscrypt: allow 256-bit master keys with AES-256-XTS	2021-11-18 14:03:54 +01:00
debugfs	debugfs: debugfs_create_file_size(): use IS_ERR to check for error	2021-10-06 15:55:59 +02:00
devpts
dlm	fs: dlm: fix memory leak when fenced	2021-07-14 16:55:59 +02:00
ecryptfs	Revert "ecryptfs: replace BUG_ON with error handling code"	2021-05-26 12:06:55 +02:00
efivarfs
efs
erofs	erofs: fix deadlock when shrink erofs slab	2021-12-01 09:19:05 +01:00
exfat	exfat: fix incorrect loading of i_blocks for large files	2021-11-18 14:03:37 +01:00
exportfs
ext2	ext2: fix sleeping in atomic bugs on error	2021-10-09 14:40:56 +02:00
ext4	ext4: check for inconsistent extents between index and leaf block	2021-12-29 12:25:54 +01:00
f2fs	f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()	2021-12-29 12:26:05 +01:00
fat
freevxfs
fscache	fscache: Fix cookie key hashing	2021-09-18 13:40:15 +02:00
fuse	fuse: annotate lock in fuse_reverse_inval_entry()	2021-12-22 09:30:58 +01:00
gfs2	gfs2: Fix length of holes reported at end-of-file	2021-12-08 09:03:18 +01:00
hfs	hfs: add lock nesting notation to hfs_find_init	2021-07-31 08:16:12 +02:00
hfsplus	hfsplus: prevent corruption in shrinking truncate	2021-05-19 10:13:10 +02:00
hostfs
hpfs
hugetlbfs	hugetlbfs: fix mount mode command line processing	2021-07-28 14:35:46 +02:00
iomap	treewide: Change list_sort to use const pointers	2021-09-30 10:11:04 +02:00
isofs	isofs: Fix out of bound access for corrupted isofs image	2021-11-12 14:58:33 +01:00
jbd2	ext4: fix debug format string warning	2021-05-19 10:13:19 +02:00
jffs2	jffs2: check the validity of dstlen in jffs2_zlib_compress()	2021-05-11 14:47:36 +02:00
jfs	JFS: fix memleak in jfs_mount	2021-11-18 14:04:15 +01:00
kernfs
lockd	lockd: lockd server-side shouldn't set fl_ops	2021-09-18 13:40:30 +02:00
minix
nfs	NFSv42: Fix pagecache invalidation after COPY/CLONE	2021-12-08 09:03:17 +01:00
nfs_common
nfsd	nfsd: Fix nsfd startup race (again)	2021-12-14 11:32:39 +01:00
nilfs2	nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group	2021-09-26 14:09:01 +02:00
nls
notify	fanotify: limit number of event merge attempts	2021-09-18 13:40:38 +02:00
ntfs	ntfs: fix validity check for file name attribute	2021-07-14 16:55:38 +02:00
ocfs2	ocfs2: fix data corruption on truncate	2021-11-18 14:03:37 +01:00
omfs
openpromfs
orangefs	fs: orangefs: fix error return code of orangefs_revalidate_lookup()	2021-11-18 14:04:23 +01:00
overlayfs	ovl: fix warning in ovl_create_real()	2021-12-22 09:30:58 +01:00
proc	proc/vmcore: fix clearing user buffer by properly using clear_user()	2021-12-01 09:19:02 +01:00
pstore	mark pstore-blk as broken	2021-07-14 16:56:12 +02:00
qnx4	qnx4: work around gcc false positive warning bug	2021-09-30 10:11:08 +02:00
qnx6
quota	quota: correct error number in free_dqentry()	2021-11-18 14:03:51 +01:00
ramfs
reiserfs	reiserfs: check directory items on read from disk	2021-08-12 13:22:19 +02:00
romfs
squashfs	squashfs: fix divide error in calculate_skip()	2021-05-19 10:13:10 +02:00
sysfs
sysv
tracefs	tracefs: Set all files to the same group ownership as the mount option	2021-12-14 11:32:40 +01:00
ubifs	treewide: Change list_sort to use const pointers	2021-09-30 10:11:04 +02:00
udf	udf: Fix crash after seekdir	2021-11-26 10:39:20 +01:00
ufs
unicode
vboxsf	vboxfs: fix broken legacy mount signature checking	2021-10-17 10:43:33 +02:00
verity	fs-verity: fix signed integer overflow with i_size near S64_MAX	2021-10-06 15:55:46 +02:00
xfs	treewide: Change list_sort to use const pointers	2021-09-30 10:11:04 +02:00
zonefs	zonefs: add MODULE_ALIAS_FS	2021-12-22 09:30:57 +01:00
aio.c	aio: fix use-after-free due to missing POLLFREE handling	2021-12-14 11:32:40 +01:00
anon_inodes.c
attr.c
bad_inode.c
binfmt_aout.c
binfmt_elf_fdpic.c
binfmt_elf.c	elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings	2021-10-06 15:55:59 +02:00
binfmt_em86.c
binfmt_flat.c
binfmt_misc.c
binfmt_script.c
block_dev.c	block: fix a race between del_gendisk and BLKRRPART	2021-06-03 09:00:45 +02:00
buffer.c
char_dev.c
compat_binfmt_elf.c
coredump.c	coredump: fix memleak in dump_vma_snapshot()	2021-09-26 14:08:56 +02:00
d_path.c
dax.c	dax: fix ENOMEM handling in grab_mapping_entry()	2021-07-14 16:56:13 +02:00
dcache.c
dcookies.c
direct-io.c
drop_caches.c
eventfd.c
eventpoll.c	fs/epoll: restore waking from ep_done_scan()	2021-05-11 14:47:12 +02:00
exec.c	Revert "Add a reference to ucounts for each cred"	2021-09-08 08:49:00 +02:00
fcntl.c	fcntl: fix potential deadlock for &fasync_struct.fa_lock	2021-09-15 09:50:27 +02:00
fhandle.c
file_table.c
file.c	fget: check that the fd still exists after getting a ref to it	2021-12-08 09:03:21 +01:00
filesystems.c
fs_context.c
fs_parser.c
fs_pin.c
fs_struct.c
fs_types.c
fs-writeback.c	writeback: fix obtain a reference to a freeing memcg css	2021-07-14 16:56:31 +02:00
fsopen.c
init.c
inode.c	fs: export an inode_update_time helper	2021-11-26 10:39:22 +01:00
internal.h	cgroup1: fix leaked context root causing sporadic NULL deref in LTP	2021-07-31 08:16:11 +02:00
io_uring.c	Revert "io_uring: reinforce cancel on flush during exit"	2021-11-06 14:10:08 +01:00
io-wq.c	io-wq: fix wakeup race when adding new work	2021-09-18 13:40:06 +02:00
io-wq.h
ioctl.c
Kconfig
Kconfig.binfmt
kernel_read_file.c	vfs: check fd has read access in kernel_read_file_from_fd()	2021-10-27 09:56:51 +02:00
libfs.c
locks.c
Makefile
mbcache.c
mount.h
mpage.c
namei.c
namespace.c	fs: warn about impending deprecation of mandatory locks	2021-08-26 08:35:57 -04:00
no-block.c
nsfs.c
open.c	open: don't silently ignore unknown O-flags in openat2()	2021-07-14 16:55:59 +02:00
pipe.c	pipe: do FASYNC notifications for every pipe IO, not just state changes	2021-09-03 10:09:28 +02:00
pnode.c
pnode.h
posix_acl.c
proc_namespace.c
read_write.c
readdir.c
remap_range.c
select.c
seq_file.c	seq_file: disallow extremely large seq buffer allocations	2021-07-20 16:05:59 +02:00
signalfd.c	signalfd: use wake_up_pollfree()	2021-12-14 11:32:40 +01:00
splice.c
stack.c
stat.c	fs: fix reporting supported extra file attributes for statx()	2021-05-11 14:47:33 +02:00
statfs.c
super.c
sync.c
timerfd.c
userfaultfd.c	userfaultfd: fix a race between writeprotect and exit_mmap()	2021-10-27 09:56:51 +02:00
utimes.c
xattr.c