FAILED: patch "[PATCH] fscrypt: fix renaming and linking special files" failed to apply to 4.4-stable tree
Subsystems (2)
[email protected]
maintainerThe patch below does not apply to the 4.4-stable tree.
If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <[email protected]>.
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
Quoted 1 line
From
42d97eb0ade31e1bc537d086842f5d6e766d9d51Mon Sep 17 00:00:00 2001
From: Eric Biggers <[email protected]>
Date: Mon, 19 Dec 2016 14:20:13 -0800
Subject: [PATCH] fscrypt: fix renaming and linking special files
Attempting to link a device node, named pipe, or socket file into an encrypted directory through rename(2) or link(2) always failed with EPERM. This happened because fscrypt_has_permitted_context() saw that the file was unencrypted and forbid creating the link. This behavior was unexpected because such files are never encrypted; only regular files, directories, and symlinks can be encrypted.
To fix this, make fscrypt_has_permitted_context() always return true on special files.
This will be covered by a test in my encryption xfstests patchset.
fs/crypto/policy.c +5 -0
@@ -179,6 +179,11 @@ int fscrypt_has_permitted_context(struct inode *parent, struct inode *child)BUG_ON (1 ); } +/* No restrictions on file types which are never encrypted */ +if (!S_ISREG (child->i_mode) && !S_ISDIR (child->i_mode) && + !S_ISLNK (child->i_mode)) +return 1 ; +/* no restrictions if the parent directory is not encrypted */ if (!parent->i_sb->s_cop->is_encrypted (parent))return 1 ;