summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJaegeuk Kim <jaegeuk@kernel.org>2019-03-13 16:15:08 -0700
committerJaegeuk Kim <jaegeuk@kernel.org>2019-03-14 10:20:54 -0700
commitaff7b628ac2d58616b74789389ebb1e987081f49 (patch)
tree96141937c85b75a4316170138414240337b02e9c
parentaadcef64b22f668c1a107b86d3521d9cac915c24 (diff)
downloadlinux-aff7b628ac2d58616b74789389ebb1e987081f49.tar.gz
linux-aff7b628ac2d58616b74789389ebb1e987081f49.tar.bz2
linux-aff7b628ac2d58616b74789389ebb1e987081f49.zip
f2fs: set pin_file under CAP_SYS_ADMIN
Android uses pin_file for uncrypt during OTA, and that should be managed by CAP_SYS_ADMIN only. Reviewed-by: Chao Yu <yuchao0@huawei.com> Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
-rw-r--r--fs/f2fs/file.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/fs/f2fs/file.c b/fs/f2fs/file.c
index 807a97ad2430..012815d816e6 100644
--- a/fs/f2fs/file.c
+++ b/fs/f2fs/file.c
@@ -2873,8 +2873,8 @@ static int f2fs_ioc_set_pin_file(struct file *filp, unsigned long arg)
__u32 pin;
int ret = 0;
- if (!inode_owner_or_capable(inode))
- return -EACCES;
+ if (!capable(CAP_SYS_ADMIN))
+ return -EPERM;
if (get_user(pin, (__u32 __user *)arg))
return -EFAULT;