summaryrefslogtreecommitdiff
path: root/fs/afs/xattr.c
diff options
context:
space:
mode:
authorMarc Dionne <marc.dionne@auristor.com>2017-07-06 17:50:18 +0300
committerLinus Torvalds <torvalds@linux-foundation.org>2017-07-10 00:40:12 +0300
commitfd2498211a551fd42b2d6b9050d649d43536e75c (patch)
tree584019e61d101ed7bdfa209c55463da751ed55ae /fs/afs/xattr.c
parentf991af3daabaecff34684fd51fac80319d1baad1 (diff)
downloadlinux-fd2498211a551fd42b2d6b9050d649d43536e75c.tar.xz
afs: Ignore AFS_ACE_READ and AFS_ACE_WRITE for directories
The AFS_ACE_READ and AFS_ACE_WRITE permission bits should not be used to make access decisions for the directory itself. They are meant to control access for the objects contained in that directory. Reading a directory is allowed if the AFS_ACE_LOOKUP bit is set. This would cause an incorrect access denied error for a directory with AFS_ACE_LOOKUP but not AFS_ACE_READ. The AFS_ACE_WRITE bit does not allow operations that modify the directory. For a directory with AFS_ACE_WRITE but neither AFS_ACE_INSERT nor AFS_ACE_DELETE, this would result in trying operations that would ultimately be denied by the server. Signed-off-by: Marc Dionne <marc.dionne@auristor.com> Signed-off-by: David Howells <dhowells@redhat.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'fs/afs/xattr.c')
0 files changed, 0 insertions, 0 deletions