J. Bruce Fields 76a67ec6fb nfsd: nfsd should drop CAP_MKNOD for non-root ...

Since creating a device node is normally an operation requiring special
privilege, Igor Zhbanov points out that it is surprising (to say the
least) that a client can, for example, create a device node on a
filesystem exported with root_squash.

So, make sure CAP_MKNOD is among the capabilities dropped when an nfsd
thread handles a request from a non-root user.

Reported-by: Igor Zhbanov <izh1979@gmail.com>
Cc: stable@kernel.org
Signed-off-by: J. Bruce Fields <bfields@citi.umich.edu>

2009-03-17 14:55:55 -04:00

..

acpi

ACPI: Enable bit 11 in _PDC to advertise hw coord

2009-02-07 00:41:14 -05:00

asm-arm

[ARM] S3C24XX: Move mci.h to arch/arm/plat-s3c24xx/include/plat

2008-10-30 10:17:16 +00:00

asm-frv

FRV: __pte_to_swp_entry doesn't expand correctly

2009-02-17 14:05:30 -08:00

asm-generic

Merge branch 'x86-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip

2009-01-26 09:47:28 -08:00

asm-h8300

h8300: update timer handler - new files

2008-10-16 11:21:29 -07:00

asm-m32r

byteorder: make swab.h include asm/swab.h like a regular header

2009-01-14 19:56:50 -08:00

asm-mn10300

byteorder: make swab.h include asm/swab.h like a regular header

2009-01-14 19:56:50 -08:00

crypto

crypto: shash - Fix tfm destruction

2009-02-05 16:51:25 +11:00

drm

drm: fix EDID parser problem with positive/negative hsync/vsync

2009-03-11 12:18:48 +10:00

keys

KEYS: Disperse linux/key_ui.h

2008-11-14 10:39:13 +11:00

linux

nfsd: nfsd should drop CAP_MKNOD for non-root

2009-03-17 14:55:55 -04:00

math-emu

math-emu: Fix thinko in _FP_DIV

2008-10-22 22:09:59 -07:00

media

Merge branch 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-2.6

2009-02-02 19:26:06 -08:00

mtd

headers_check fix: mtd/inftl-user.h

2009-01-31 00:13:34 +05:30

net

netns: Remove net_alive

2009-03-03 01:14:27 -08:00

pcmcia

pcmcia: ioctl-internal definitions

2008-08-31 16:00:42 +02:00

rdma

RDMA/cma: Remove padding arrays by using struct sockaddr_storage

2008-08-04 11:02:14 -07:00

rxrpc

…

scsi

[SCSI] fcoe: Out of order tx frames was causing several check condition SCSI status

2009-03-10 09:09:21 -05:00

sound

headers_check fix: sound/hdsp.h

2009-01-31 00:13:56 +05:30

trace

sched, trace: update trace_sched_wakeup()

2008-12-25 13:10:21 +01:00

video

atyfb: fix CONFIG_ namespace violations

2009-02-05 12:56:48 -08:00

xen

xen: add xenfs to allow usermode <-> Xen interaction

2009-01-08 08:30:59 -08:00

Kbuild

…