diff options
author | Linus Torvalds <torvalds@linux-foundation.org> | 2009-08-28 13:53:56 -0400 |
---|---|---|
committer | Linus Torvalds <torvalds@linux-foundation.org> | 2009-09-08 14:07:43 -0400 |
commit | f1ac9f6bfea6f21e8ab6dbbe46879d62a6fba8c0 (patch) | |
tree | 01b4e3c84e1403f6c900dd4412aa09cd335c030c | |
parent | b7a437b08a44a3ed7e3a052eb39d2c5f618b603b (diff) |
Simplify exec_permission_lite() further
This function is only called for path components that are already known
to be directories (they have a '->lookup' method). So don't bother
doing that whole S_ISDIR() testing, the whole point of the 'lite()'
version is that we know that we are looking at a directory component,
and that we're only checking name lookup permission.
Reviewed-by: James Morris <jmorris@namei.org>
Acked-by: Serge Hallyn <serue@us.ibm.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
-rw-r--r-- | fs/namei.c | 8 |
1 files changed, 1 insertions, 7 deletions
diff --git a/fs/namei.c b/fs/namei.c index 8c3580610eec..929f535fb225 100644 --- a/fs/namei.c +++ b/fs/namei.c | |||
@@ -445,13 +445,7 @@ static int exec_permission_lite(struct inode *inode) | |||
445 | if (mode & MAY_EXEC) | 445 | if (mode & MAY_EXEC) |
446 | goto ok; | 446 | goto ok; |
447 | 447 | ||
448 | if ((inode->i_mode & S_IXUGO) && capable(CAP_DAC_OVERRIDE)) | 448 | if (capable(CAP_DAC_OVERRIDE) || capable(CAP_DAC_READ_SEARCH)) |
449 | goto ok; | ||
450 | |||
451 | if (S_ISDIR(inode->i_mode) && capable(CAP_DAC_OVERRIDE)) | ||
452 | goto ok; | ||
453 | |||
454 | if (S_ISDIR(inode->i_mode) && capable(CAP_DAC_READ_SEARCH)) | ||
455 | goto ok; | 449 | goto ok; |
456 | 450 | ||
457 | return -EACCES; | 451 | return -EACCES; |