summaryrefslogtreecommitdiff
path: root/fs/gfs2/quota.h
diff options
context:
space:
mode:
authorBob Peterson <rpeterso@redhat.com>2020-05-05 19:53:21 +0300
committerAndreas Gruenbacher <agruenba@redhat.com>2020-05-08 19:47:58 +0300
commit4ed0c30811cb4d30ef89850b787a53a84d5d2bcb (patch)
tree7a9ea7fad5138fa93377f285bc3b44f872fb833a /fs/gfs2/quota.h
parente6ce26e571a813e6992c5148b27f2a4b17952080 (diff)
downloadlinux-4ed0c30811cb4d30ef89850b787a53a84d5d2bcb.tar.xz
gfs2: move privileged user check to gfs2_quota_lock_check
Before this patch, function gfs2_quota_lock checked if it was called from a privileged user, and if so, it bypassed the quota check: superuser can operate outside the quotas. That's the wrong place for the check because the lock/unlock functions are separate from the lock_check function, and you can do lock and unlock without actually checking the quotas. This patch moves the check to gfs2_quota_lock_check. Signed-off-by: Bob Peterson <rpeterso@redhat.com> Signed-off-by: Andreas Gruenbacher <agruenba@redhat.com>
Diffstat (limited to 'fs/gfs2/quota.h')
-rw-r--r--fs/gfs2/quota.h3
1 files changed, 2 insertions, 1 deletions
diff --git a/fs/gfs2/quota.h b/fs/gfs2/quota.h
index 7f9ca8ef40fc..21ada332d555 100644
--- a/fs/gfs2/quota.h
+++ b/fs/gfs2/quota.h
@@ -44,7 +44,8 @@ static inline int gfs2_quota_lock_check(struct gfs2_inode *ip,
int ret;
ap->allowed = UINT_MAX; /* Assume we are permitted a whole lot */
- if (sdp->sd_args.ar_quota == GFS2_QUOTA_OFF)
+ if (capable(CAP_SYS_RESOURCE) ||
+ sdp->sd_args.ar_quota == GFS2_QUOTA_OFF)
return 0;
ret = gfs2_quota_lock(ip, NO_UID_QUOTA_CHANGE, NO_GID_QUOTA_CHANGE);
if (ret)