• Serge E. Hallyn's avatar
    add some long-missing capabilities to fs_mask · 0ad30b8f
    Serge E. Hallyn authored
    When POSIX capabilities were introduced during the 2.1 Linux
    cycle, the fs mask, which represents the capabilities which having
    fsuid==0 is supposed to grant, did not include CAP_MKNOD and
    CAP_LINUX_IMMUTABLE.  However, before capabilities the privilege
    to call these did in fact depend upon fsuid==0.
    This patch introduces those capabilities into the fsmask,
    restoring the old behavior.
    See the thread starting at http://lkml.org/lkml/2009/3/11/157
    Note that if this fix is deemed valid, then earlier kernel versions (2.4
    and 2.2) ought to be fixed too.
    	[Mar 23] Actually delete old CAP_FS_SET definition...
    	[Mar 20] Updated against J. Bruce Fields's patch
    Reported-by: default avatarIgor Zhbanov <izh1979@gmail.com>
    Signed-off-by: default avatarSerge E. Hallyn <serue@us.ibm.com>
    Cc: stable@kernel.org
    Cc: J. Bruce Fields <bfields@citi.umich.edu>
    Signed-off-by: default avatarLinus Torvalds <torvalds@linux-foundation.org>
capability.h 17.4 KB