switch-linux/include
J. Bruce Fields 76a67ec6fb nfsd: nfsd should drop CAP_MKNOD for non-root
Since creating a device node is normally an operation requiring special
privilege, Igor Zhbanov points out that it is surprising (to say the
least) that a client can, for example, create a device node on a
filesystem exported with root_squash.

So, make sure CAP_MKNOD is among the capabilities dropped when an nfsd
thread handles a request from a non-root user.

Reported-by: Igor Zhbanov <izh1979@gmail.com>
Cc: stable@kernel.org
Signed-off-by: J. Bruce Fields <bfields@citi.umich.edu>
2009-03-17 14:55:55 -04:00
..
acpi
asm-arm
asm-frv FRV: __pte_to_swp_entry doesn't expand correctly 2009-02-17 14:05:30 -08:00
asm-generic
asm-h8300
asm-m32r
asm-mn10300
crypto
drm drm: fix EDID parser problem with positive/negative hsync/vsync 2009-03-11 12:18:48 +10:00
keys
linux nfsd: nfsd should drop CAP_MKNOD for non-root 2009-03-17 14:55:55 -04:00
math-emu
media
mtd
net netns: Remove net_alive 2009-03-03 01:14:27 -08:00
pcmcia
rdma
rxrpc
scsi [SCSI] fcoe: Out of order tx frames was causing several check condition SCSI status 2009-03-10 09:09:21 -05:00
sound
trace
video
xen
Kbuild