diff options
author | Rusty Russell <rusty@rustcorp.com.au> | 2014-03-23 21:30:34 -0400 |
---|---|---|
committer | Rusty Russell <rusty@rustcorp.com.au> | 2014-03-23 21:51:00 -0400 |
commit | 58f86cc89c3372d3e61d5b71e5513ec5a0b02848 (patch) | |
tree | ba12cb68846c5e4e04d3442528dee70e58100859 /fs | |
parent | c6bda7c988a57958108741cde9b1f12e9727a938 (diff) |
VERIFY_OCTAL_PERMISSIONS: stricter checking for sysfs perms.
Summary of http://lkml.org/lkml/2014/3/14/363 :
Ted: module_param(queue_depth, int, 444)
Joe: 0444!
Rusty: User perms >= group perms >= other perms?
Joe: CLASS_ATTR, DEVICE_ATTR, SENSOR_ATTR and SENSOR_ATTR_2?
Side effect of stricter permissions means removing the unnecessary
S_IFREG from several callers.
Note that the BUILD_BUG_ON_ZERO((perm) & 2) test was removed: a fair
number of drivers fail this test, so that will be the debate for a
future patch.
Suggested-by: Joe Perches <joe@perches.com>
Acked-by: Bjorn Helgaas <bhelgaas@google.com> for drivers/pci/slot.c
Acked-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Cc: Miklos Szeredi <miklos@szeredi.hu>
Cc: Mark Fasheh <mfasheh@suse.com>
Cc: Joel Becker <jlbec@evilplan.org>
Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
Diffstat (limited to 'fs')
-rw-r--r-- | fs/fuse/cuse.c | 4 | ||||
-rw-r--r-- | fs/ocfs2/cluster/sys.c | 2 | ||||
-rw-r--r-- | fs/ocfs2/stackglue.c | 8 |
3 files changed, 7 insertions, 7 deletions
diff --git a/fs/fuse/cuse.c b/fs/fuse/cuse.c index b96a49b37d66..77cf5eeeabd1 100644 --- a/fs/fuse/cuse.c +++ b/fs/fuse/cuse.c | |||
@@ -568,7 +568,7 @@ static ssize_t cuse_class_waiting_show(struct device *dev, | |||
568 | 568 | ||
569 | return sprintf(buf, "%d\n", atomic_read(&cc->fc.num_waiting)); | 569 | return sprintf(buf, "%d\n", atomic_read(&cc->fc.num_waiting)); |
570 | } | 570 | } |
571 | static DEVICE_ATTR(waiting, S_IFREG | 0400, cuse_class_waiting_show, NULL); | 571 | static DEVICE_ATTR(waiting, 0400, cuse_class_waiting_show, NULL); |
572 | 572 | ||
573 | static ssize_t cuse_class_abort_store(struct device *dev, | 573 | static ssize_t cuse_class_abort_store(struct device *dev, |
574 | struct device_attribute *attr, | 574 | struct device_attribute *attr, |
@@ -579,7 +579,7 @@ static ssize_t cuse_class_abort_store(struct device *dev, | |||
579 | fuse_abort_conn(&cc->fc); | 579 | fuse_abort_conn(&cc->fc); |
580 | return count; | 580 | return count; |
581 | } | 581 | } |
582 | static DEVICE_ATTR(abort, S_IFREG | 0200, NULL, cuse_class_abort_store); | 582 | static DEVICE_ATTR(abort, 0200, NULL, cuse_class_abort_store); |
583 | 583 | ||
584 | static struct attribute *cuse_class_dev_attrs[] = { | 584 | static struct attribute *cuse_class_dev_attrs[] = { |
585 | &dev_attr_waiting.attr, | 585 | &dev_attr_waiting.attr, |
diff --git a/fs/ocfs2/cluster/sys.c b/fs/ocfs2/cluster/sys.c index a4b07730b2e1..b7f57271d49c 100644 --- a/fs/ocfs2/cluster/sys.c +++ b/fs/ocfs2/cluster/sys.c | |||
@@ -41,7 +41,7 @@ static ssize_t version_show(struct kobject *kobj, struct kobj_attribute *attr, | |||
41 | return snprintf(buf, PAGE_SIZE, "%u\n", O2NM_API_VERSION); | 41 | return snprintf(buf, PAGE_SIZE, "%u\n", O2NM_API_VERSION); |
42 | } | 42 | } |
43 | static struct kobj_attribute attr_version = | 43 | static struct kobj_attribute attr_version = |
44 | __ATTR(interface_revision, S_IFREG | S_IRUGO, version_show, NULL); | 44 | __ATTR(interface_revision, S_IRUGO, version_show, NULL); |
45 | 45 | ||
46 | static struct attribute *o2cb_attrs[] = { | 46 | static struct attribute *o2cb_attrs[] = { |
47 | &attr_version.attr, | 47 | &attr_version.attr, |
diff --git a/fs/ocfs2/stackglue.c b/fs/ocfs2/stackglue.c index 1324e6600e57..25e9f7b5bad3 100644 --- a/fs/ocfs2/stackglue.c +++ b/fs/ocfs2/stackglue.c | |||
@@ -494,7 +494,7 @@ static ssize_t ocfs2_max_locking_protocol_show(struct kobject *kobj, | |||
494 | } | 494 | } |
495 | 495 | ||
496 | static struct kobj_attribute ocfs2_attr_max_locking_protocol = | 496 | static struct kobj_attribute ocfs2_attr_max_locking_protocol = |
497 | __ATTR(max_locking_protocol, S_IFREG | S_IRUGO, | 497 | __ATTR(max_locking_protocol, S_IRUGO, |
498 | ocfs2_max_locking_protocol_show, NULL); | 498 | ocfs2_max_locking_protocol_show, NULL); |
499 | 499 | ||
500 | static ssize_t ocfs2_loaded_cluster_plugins_show(struct kobject *kobj, | 500 | static ssize_t ocfs2_loaded_cluster_plugins_show(struct kobject *kobj, |
@@ -526,7 +526,7 @@ static ssize_t ocfs2_loaded_cluster_plugins_show(struct kobject *kobj, | |||
526 | } | 526 | } |
527 | 527 | ||
528 | static struct kobj_attribute ocfs2_attr_loaded_cluster_plugins = | 528 | static struct kobj_attribute ocfs2_attr_loaded_cluster_plugins = |
529 | __ATTR(loaded_cluster_plugins, S_IFREG | S_IRUGO, | 529 | __ATTR(loaded_cluster_plugins, S_IRUGO, |
530 | ocfs2_loaded_cluster_plugins_show, NULL); | 530 | ocfs2_loaded_cluster_plugins_show, NULL); |
531 | 531 | ||
532 | static ssize_t ocfs2_active_cluster_plugin_show(struct kobject *kobj, | 532 | static ssize_t ocfs2_active_cluster_plugin_show(struct kobject *kobj, |
@@ -548,7 +548,7 @@ static ssize_t ocfs2_active_cluster_plugin_show(struct kobject *kobj, | |||
548 | } | 548 | } |
549 | 549 | ||
550 | static struct kobj_attribute ocfs2_attr_active_cluster_plugin = | 550 | static struct kobj_attribute ocfs2_attr_active_cluster_plugin = |
551 | __ATTR(active_cluster_plugin, S_IFREG | S_IRUGO, | 551 | __ATTR(active_cluster_plugin, S_IRUGO, |
552 | ocfs2_active_cluster_plugin_show, NULL); | 552 | ocfs2_active_cluster_plugin_show, NULL); |
553 | 553 | ||
554 | static ssize_t ocfs2_cluster_stack_show(struct kobject *kobj, | 554 | static ssize_t ocfs2_cluster_stack_show(struct kobject *kobj, |
@@ -597,7 +597,7 @@ static ssize_t ocfs2_cluster_stack_store(struct kobject *kobj, | |||
597 | 597 | ||
598 | 598 | ||
599 | static struct kobj_attribute ocfs2_attr_cluster_stack = | 599 | static struct kobj_attribute ocfs2_attr_cluster_stack = |
600 | __ATTR(cluster_stack, S_IFREG | S_IRUGO | S_IWUSR, | 600 | __ATTR(cluster_stack, S_IRUGO | S_IWUSR, |
601 | ocfs2_cluster_stack_show, | 601 | ocfs2_cluster_stack_show, |
602 | ocfs2_cluster_stack_store); | 602 | ocfs2_cluster_stack_store); |
603 | 603 | ||