linux-stable.git/arch/s390/kernel/compat_linux.c, branch linux-4.4.y

s390: fix handling of -1 in set{,fs}[gu]id16 syscalls

2018-02-22T14:44:58+00:00

commit 6dd0d2d22aa363fec075cb2577ba273ac8462e94 upstream.

For some reason, the implementation of some 16-bit ID system calls
(namely, setuid16/setgid16 and setfsuid16/setfsgid16) used type cast
instead of low2highgid/low2highuid macros for converting [GU]IDs, which
led to incorrect handling of value of -1 (which ought to be considered
invalid).

Discovered by strace test suite.

Cc: stable@vger.kernel.org
Signed-off-by: Eugene Syromiatnikov 
Signed-off-by: Heiko Carstens 
Signed-off-by: Martin Schwidefsky 
Signed-off-by: Greg Kroah-Hartman

kernel: make groups_sort calling a responsibility group_info allocators

2018-01-10T08:27:10+00:00

commit bdcf0a423ea1c40bbb40e7ee483b50fc8aa3d758 upstream.

In testing, we found that nfsd threads may call set_groups in parallel
for the same entry cached in auth.unix.gid, racing in the call of
groups_sort, corrupting the groups for that entry and leading to
permission denials for the client.

This patch:
 - Make groups_sort globally visible.
 - Move the call to groups_sort to the modifiers of group_info
 - Remove the call to groups_sort from set_groups

Link: http://lkml.kernel.org/r/20171211151420.18655-1-thiago.becker@gmail.com
Signed-off-by: Thiago Rafael Becker 
Reviewed-by: Matthew Wilcox 
Reviewed-by: NeilBrown 
Acked-by: "J. Bruce Fields" 
Cc: Al Viro 
Cc: Martin Schwidefsky 
Cc: 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds 
Signed-off-by: Greg Kroah-Hartman

groups: Consolidate the setgroups permission checks

2014-12-05T23:19:27+00:00

Today there are 3 instances of setgroups and due to an oversight their
permission checking has diverged.  Add a common function so that
they may all share the same permission checking code.

This corrects the current oversight in the current permission checks
and adds a helper to avoid this in the future.

A user namespace security fix will update this new helper, shortly.

Cc: stable@vger.kernel.org
Signed-off-by: "Eric W. Biederman"

s390/compat: add sync_file_range and fallocate compat syscalls

2014-03-04T08:05:47+00:00

The compat syscall wrappers for sync_file_range and fallocate merged 32 bit
parameters into 64 bit parameters. Therefore they did more than just the
usual zero and/or sign extension of system call parameters.

So convert these two wrappers to full s390 specific compat sytem calls.

Signed-off-by: Heiko Carstens

s390/compat: convert to COMPAT_SYSCALL_DEFINEx part 7

2014-03-04T08:05:38+00:00

Signed-off-by: Heiko Carstens

s390/compat: convert to COMPAT_SYSCALL_DEFINEx part 6

2014-03-04T08:05:37+00:00

Signed-off-by: Heiko Carstens

s390/compat: convert to COMPAT_SYSCALL_DEFINEx part 5

2014-03-04T08:05:36+00:00

Signed-off-by: Heiko Carstens

s390/compat: convert to COMPAT_SYSCALL_DEFINEx part 4

2014-03-04T08:05:36+00:00

Signed-off-by: Heiko Carstens

s390/compat: convert to COMPAT_SYSCALL_DEFINEx part 3

2014-03-04T08:05:35+00:00

Signed-off-by: Heiko Carstens

s390/compat: convert to COMPAT_SYSCALL_DEFINEx part 2

2014-03-04T08:05:35+00:00

Signed-off-by: Heiko Carstens