linux.git/fs/namespace.c, branch v2.6.35

Merge branch 'next' into for-linus

2010-05-17T22:57:00+00:00

Fix the regression created by "set S_DEAD on unlink()..." commit

2010-05-15T11:16:33+00:00

1) i_flags simply doesn't work for mount/unlink race prevention;
we may have many links to file and rm on one of those obviously
shouldn't prevent bind on top of another later on.  To fix it
right way we need to mark _dentry_ as unsuitable for mounting
upon; new flag (DCACHE_CANT_MOUNT) is protected by d_flags and
i_mutex on the inode in question.  Set it (with dont_mount(dentry))
in unlink/rmdir/etc., check (with cant_mount(dentry)) in places
in namespace.c that used to check for S_DEAD.  Setting S_DEAD
is still needed in places where we used to set it (for directories
getting killed), since we rely on it for readdir/rmdir race
prevention.

2) rename()/mount() protection has another bogosity - we unhash
the target before we'd checked that it's not a mountpoint.  Fixed.

3) ancient bogosity in pivot_root() - we locked i_mutex on the
right directory, but checked S_DEAD on the different (and wrong)
one.  Noticed and fixed.

Signed-off-by: Al Viro

security: remove dead hook sb_post_pivotroot

2010-04-12T02:18:32+00:00

Unused hook.  Remove.

Signed-off-by: Eric Paris 
Signed-off-by: James Morris

security: remove dead hook sb_post_addmount

2010-04-12T02:18:31+00:00

Unused hook.  Remove.

Signed-off-by: Eric Paris 
Signed-off-by: James Morris

security: remove dead hook sb_post_remount

2010-04-12T02:18:30+00:00

Unused hook.  Remove.

Signed-off-by: Eric Paris 
Signed-off-by: James Morris

security: remove dead hook sb_umount_busy

2010-04-12T02:18:30+00:00

Unused hook.  Remove.

Signed-off-by: Eric Paris 
Signed-off-by: James Morris

security: remove dead hook sb_umount_close

2010-04-12T02:18:29+00:00

Unused hook.  Remove.

Signed-off-by: Eric Paris 
Signed-off-by: James Morris

security: remove sb_check_sb hooks

2010-04-12T02:18:28+00:00

Unused hook.  Remove it.

Signed-off-by: Eric Paris 
Signed-off-by: James Morris

vfs: add NOFOLLOW flag to umount(2)

2010-03-03T19:08:00+00:00

Add a new UMOUNT_NOFOLLOW flag to umount(2).  This is needed to prevent
symlink attacks in unprivileged unmounts (fuse, samba, ncpfs).

Additionally, return -EINVAL if an unknown flag is used (and specify
an explicitly unused flag: UMOUNT_UNUSED).  This makes it possible for
the caller to determine if a flag is supported or not.

CC: Eugene Teo 
CC: Michael Kerrisk 
Signed-off-by: Miklos Szeredi 
Signed-off-by: Al Viro

Mirror MS_KERNMOUNT in ->mnt_flags

2010-03-03T19:08:00+00:00

Signed-off-by: Al Viro