linux-kernel March 2009 archive
Main Archive Page > Month Archives  > linux-kernel archives
linux-kernel: Re: : VFS, NFS security bug? Should CAP_MKNOD

Re: : VFS, NFS security bug? Should CAP_MKNOD and CAP_LINUX_IMMUTABLE be added to CAP_FS_MASK?

From: Igor Zhbanov <izh1979_at_nospam>
Date: Mon Mar 16 2009 - 23:17:20 GMT
To: "Serge E. Hallyn" <serue@us.ibm.com>


Anyway, please commit changes to linux-2.4 too.

fs/nfsd/auth.c for CAP_NFSD_MASK:
#define CAP_NFSD_MASK (CAP_FS_MASK|CAP_TO_MASK(CAP_SYS_RESOURCE))

and

include/linux/capability.h for CAP_FS_MASK:
#define CAP_FS_MASK 0x1f
-- To unsubscribe from this list: send the line "unsubscribe linux-security-module" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html