diff options
| author | Ingo Molnar <mingo@elte.hu> | 2010-08-31 03:45:21 -0400 |
|---|---|---|
| committer | Ingo Molnar <mingo@elte.hu> | 2010-08-31 03:45:46 -0400 |
| commit | daab7fc734a53fdeaf844b7c03053118ad1769da (patch) | |
| tree | 575deb3cdcc6dda562acaed6f7c29bc81ae01cf2 /kernel/user_namespace.c | |
| parent | 774ea0bcb27f57b6fd521b3b6c43237782fed4b9 (diff) | |
| parent | 2bfc96a127bc1cc94d26bfaa40159966064f9c8c (diff) | |
Merge commit 'v2.6.36-rc3' into x86/memblock
Conflicts:
arch/x86/kernel/trampoline.c
mm/memblock.c
Merge reason: Resolve the conflicts, update to latest upstream.
Signed-off-by: Ingo Molnar <mingo@elte.hu>
Diffstat (limited to 'kernel/user_namespace.c')
| -rw-r--r-- | kernel/user_namespace.c | 44 |
1 files changed, 44 insertions, 0 deletions
diff --git a/kernel/user_namespace.c b/kernel/user_namespace.c index b2d70d38dff4..25915832291a 100644 --- a/kernel/user_namespace.c +++ b/kernel/user_namespace.c | |||
| @@ -9,6 +9,7 @@ | |||
| 9 | #include <linux/nsproxy.h> | 9 | #include <linux/nsproxy.h> |
| 10 | #include <linux/slab.h> | 10 | #include <linux/slab.h> |
| 11 | #include <linux/user_namespace.h> | 11 | #include <linux/user_namespace.h> |
| 12 | #include <linux/highuid.h> | ||
| 12 | #include <linux/cred.h> | 13 | #include <linux/cred.h> |
| 13 | 14 | ||
| 14 | /* | 15 | /* |
| @@ -82,3 +83,46 @@ void free_user_ns(struct kref *kref) | |||
| 82 | schedule_work(&ns->destroyer); | 83 | schedule_work(&ns->destroyer); |
| 83 | } | 84 | } |
| 84 | EXPORT_SYMBOL(free_user_ns); | 85 | EXPORT_SYMBOL(free_user_ns); |
| 86 | |||
| 87 | uid_t user_ns_map_uid(struct user_namespace *to, const struct cred *cred, uid_t uid) | ||
| 88 | { | ||
| 89 | struct user_namespace *tmp; | ||
| 90 | |||
| 91 | if (likely(to == cred->user->user_ns)) | ||
| 92 | return uid; | ||
| 93 | |||
| 94 | |||
| 95 | /* Is cred->user the creator of the target user_ns | ||
| 96 | * or the creator of one of it's parents? | ||
| 97 | */ | ||
| 98 | for ( tmp = to; tmp != &init_user_ns; | ||
| 99 | tmp = tmp->creator->user_ns ) { | ||
| 100 | if (cred->user == tmp->creator) { | ||
| 101 | return (uid_t)0; | ||
| 102 | } | ||
| 103 | } | ||
| 104 | |||
| 105 | /* No useful relationship so no mapping */ | ||
| 106 | return overflowuid; | ||
| 107 | } | ||
| 108 | |||
| 109 | gid_t user_ns_map_gid(struct user_namespace *to, const struct cred *cred, gid_t gid) | ||
| 110 | { | ||
| 111 | struct user_namespace *tmp; | ||
| 112 | |||
| 113 | if (likely(to == cred->user->user_ns)) | ||
| 114 | return gid; | ||
| 115 | |||
| 116 | /* Is cred->user the creator of the target user_ns | ||
| 117 | * or the creator of one of it's parents? | ||
| 118 | */ | ||
| 119 | for ( tmp = to; tmp != &init_user_ns; | ||
| 120 | tmp = tmp->creator->user_ns ) { | ||
| 121 | if (cred->user == tmp->creator) { | ||
| 122 | return (gid_t)0; | ||
| 123 | } | ||
| 124 | } | ||
| 125 | |||
| 126 | /* No useful relationship so no mapping */ | ||
| 127 | return overflowgid; | ||
| 128 | } | ||
