aboutsummaryrefslogtreecommitdiffstats
path: root/ipc/util.c
diff options
context:
space:
mode:
Diffstat (limited to 'ipc/util.c')
-rw-r--r--ipc/util.c18
1 files changed, 13 insertions, 5 deletions
diff --git a/ipc/util.c b/ipc/util.c
index 361fd1c96fcf..5a1808c774a2 100644
--- a/ipc/util.c
+++ b/ipc/util.c
@@ -258,6 +258,8 @@ int ipc_get_maxid(struct ipc_ids *ids)
258 258
259int ipc_addid(struct ipc_ids* ids, struct kern_ipc_perm* new, int size) 259int ipc_addid(struct ipc_ids* ids, struct kern_ipc_perm* new, int size)
260{ 260{
261 uid_t euid;
262 gid_t egid;
261 int id, err; 263 int id, err;
262 264
263 if (size > IPCMNI) 265 if (size > IPCMNI)
@@ -280,8 +282,9 @@ int ipc_addid(struct ipc_ids* ids, struct kern_ipc_perm* new, int size)
280 282
281 ids->in_use++; 283 ids->in_use++;
282 284
283 new->cuid = new->uid = current->euid; 285 current_euid_egid(&euid, &egid);
284 new->gid = new->cgid = current->egid; 286 new->cuid = new->uid = euid;
287 new->gid = new->cgid = egid;
285 288
286 new->seq = ids->seq++; 289 new->seq = ids->seq++;
287 if(ids->seq > ids->seq_max) 290 if(ids->seq > ids->seq_max)
@@ -620,13 +623,15 @@ void ipc_rcu_putref(void *ptr)
620 623
621int ipcperms (struct kern_ipc_perm *ipcp, short flag) 624int ipcperms (struct kern_ipc_perm *ipcp, short flag)
622{ /* flag will most probably be 0 or S_...UGO from <linux/stat.h> */ 625{ /* flag will most probably be 0 or S_...UGO from <linux/stat.h> */
626 uid_t euid = current_euid();
623 int requested_mode, granted_mode, err; 627 int requested_mode, granted_mode, err;
624 628
625 if (unlikely((err = audit_ipc_obj(ipcp)))) 629 if (unlikely((err = audit_ipc_obj(ipcp))))
626 return err; 630 return err;
627 requested_mode = (flag >> 6) | (flag >> 3) | flag; 631 requested_mode = (flag >> 6) | (flag >> 3) | flag;
628 granted_mode = ipcp->mode; 632 granted_mode = ipcp->mode;
629 if (current->euid == ipcp->cuid || current->euid == ipcp->uid) 633 if (euid == ipcp->cuid ||
634 euid == ipcp->uid)
630 granted_mode >>= 6; 635 granted_mode >>= 6;
631 else if (in_group_p(ipcp->cgid) || in_group_p(ipcp->gid)) 636 else if (in_group_p(ipcp->cgid) || in_group_p(ipcp->gid))
632 granted_mode >>= 3; 637 granted_mode >>= 3;
@@ -788,6 +793,7 @@ struct kern_ipc_perm *ipcctl_pre_down(struct ipc_ids *ids, int id, int cmd,
788 struct ipc64_perm *perm, int extra_perm) 793 struct ipc64_perm *perm, int extra_perm)
789{ 794{
790 struct kern_ipc_perm *ipcp; 795 struct kern_ipc_perm *ipcp;
796 uid_t euid;
791 int err; 797 int err;
792 798
793 down_write(&ids->rw_mutex); 799 down_write(&ids->rw_mutex);
@@ -807,8 +813,10 @@ struct kern_ipc_perm *ipcctl_pre_down(struct ipc_ids *ids, int id, int cmd,
807 if (err) 813 if (err)
808 goto out_unlock; 814 goto out_unlock;
809 } 815 }
810 if (current->euid == ipcp->cuid || 816
811 current->euid == ipcp->uid || capable(CAP_SYS_ADMIN)) 817 euid = current_euid();
818 if (euid == ipcp->cuid ||
819 euid == ipcp->uid || capable(CAP_SYS_ADMIN))
812 return ipcp; 820 return ipcp;
813 821
814 err = -EPERM; 822 err = -EPERM;