]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
fusefs: enforce -onoallow_other even beneath the mountpoint
authorasomers <asomers@FreeBSD.org>
Fri, 5 Apr 2019 17:21:23 +0000 (17:21 +0000)
committerasomers <asomers@FreeBSD.org>
Fri, 5 Apr 2019 17:21:23 +0000 (17:21 +0000)
commit27a1350eaecd2757042579b7c354b8dfee802fb2
tree092b3bc84790bd1ddd30ff4046aed859d09e1061
parentfe261bf0d62a828f847d354e567dd7f898851837
fusefs: enforce -onoallow_other even beneath the mountpoint

When -o allow_other is not in use, fusefs is supposed to prevent access to
the filesystem by any user other than the one who owns the daemon.  Our
fusefs implementation was only enforcing that restriction at the mountpoint
itself.  That was usually good enough because lookup usually descends from
the mountpoint.  However, there are cases when it doesn't, such as when
using openat relative to a file beneath the mountpoint.

PR: 237052
Sponsored by: The FreeBSD Foundation
sys/fs/fuse/fuse_internal.c
tests/sys/fs/fusefs/allow_other.cc