Re: [PATCH 02/11] mtd: Check permissions towards mtd block device inode when mounting

2017-12-23 Thread Richard Weinberger
Dongsu, Am Samstag, 23. Dezember 2017, 13:18:30 CET schrieb Dongsu Park: > Hi, > > On Fri, Dec 22, 2017 at 10:06 PM, Richard Weinberger > > wrote: > > Dongsu, > > > > On Fri, Dec 22, 2017 at 3:32 PM, Dongsu Park wrote: > >> From: Seth Forshee > >> > >> Unprivileged users should not be able

Re: [PATCH 02/11] mtd: Check permissions towards mtd block device inode when mounting

2017-12-23 Thread Dongsu Park
Hi, On Fri, Dec 22, 2017 at 10:06 PM, Richard Weinberger wrote: > Dongsu, > > On Fri, Dec 22, 2017 at 3:32 PM, Dongsu Park wrote: >> From: Seth Forshee >> >> Unprivileged users should not be able to mount mtd block devices >> when they lack sufficient privileges towards the block device >> inod

Re: [PATCH 02/11] mtd: Check permissions towards mtd block device inode when mounting

2017-12-22 Thread Serge E. Hallyn
On Fri, Dec 22, 2017 at 03:32:26PM +0100, Dongsu Park wrote: > From: Seth Forshee > > Unprivileged users should not be able to mount mtd block devices > when they lack sufficient privileges towards the block device > inode. Update mount_mtd() to validate that the user has the > required access t

Re: [PATCH 02/11] mtd: Check permissions towards mtd block device inode when mounting

2017-12-22 Thread Richard Weinberger
Dongsu, On Fri, Dec 22, 2017 at 3:32 PM, Dongsu Park wrote: > From: Seth Forshee > > Unprivileged users should not be able to mount mtd block devices > when they lack sufficient privileges towards the block device > inode. Update mount_mtd() to validate that the user has the > required access t

[PATCH 02/11] mtd: Check permissions towards mtd block device inode when mounting

2017-12-22 Thread Dongsu Park
From: Seth Forshee Unprivileged users should not be able to mount mtd block devices when they lack sufficient privileges towards the block device inode. Update mount_mtd() to validate that the user has the required access to the inode at the specified path. The check will be skipped for CAP_SYS_