diff options
Diffstat (limited to 'ipc/util.c')
-rw-r--r-- | ipc/util.c | 18 |
1 files changed, 13 insertions, 5 deletions
diff --git a/ipc/util.c b/ipc/util.c index 49b3ea615dc5..c8a76701b6c9 100644 --- a/ipc/util.c +++ b/ipc/util.c | |||
@@ -258,6 +258,8 @@ int ipc_get_maxid(struct ipc_ids *ids) | |||
258 | 258 | ||
259 | int ipc_addid(struct ipc_ids* ids, struct kern_ipc_perm* new, int size) | 259 | int ipc_addid(struct ipc_ids* ids, struct kern_ipc_perm* new, int size) |
260 | { | 260 | { |
261 | uid_t euid; | ||
262 | gid_t egid; | ||
261 | int id, err; | 263 | int id, err; |
262 | 264 | ||
263 | if (size > IPCMNI) | 265 | if (size > IPCMNI) |
@@ -272,8 +274,9 @@ int ipc_addid(struct ipc_ids* ids, struct kern_ipc_perm* new, int size) | |||
272 | 274 | ||
273 | ids->in_use++; | 275 | ids->in_use++; |
274 | 276 | ||
275 | new->cuid = new->uid = current->euid; | 277 | current_euid_egid(&euid, &egid); |
276 | new->gid = new->cgid = current->egid; | 278 | new->cuid = new->uid = euid; |
279 | new->gid = new->cgid = egid; | ||
277 | 280 | ||
278 | new->seq = ids->seq++; | 281 | new->seq = ids->seq++; |
279 | if(ids->seq > ids->seq_max) | 282 | if(ids->seq > ids->seq_max) |
@@ -616,13 +619,15 @@ void ipc_rcu_putref(void *ptr) | |||
616 | 619 | ||
617 | int ipcperms (struct kern_ipc_perm *ipcp, short flag) | 620 | int ipcperms (struct kern_ipc_perm *ipcp, short flag) |
618 | { /* flag will most probably be 0 or S_...UGO from <linux/stat.h> */ | 621 | { /* flag will most probably be 0 or S_...UGO from <linux/stat.h> */ |
622 | uid_t euid = current_euid(); | ||
619 | int requested_mode, granted_mode, err; | 623 | int requested_mode, granted_mode, err; |
620 | 624 | ||
621 | if (unlikely((err = audit_ipc_obj(ipcp)))) | 625 | if (unlikely((err = audit_ipc_obj(ipcp)))) |
622 | return err; | 626 | return err; |
623 | requested_mode = (flag >> 6) | (flag >> 3) | flag; | 627 | requested_mode = (flag >> 6) | (flag >> 3) | flag; |
624 | granted_mode = ipcp->mode; | 628 | granted_mode = ipcp->mode; |
625 | if (current->euid == ipcp->cuid || current->euid == ipcp->uid) | 629 | if (euid == ipcp->cuid || |
630 | euid == ipcp->uid) | ||
626 | granted_mode >>= 6; | 631 | granted_mode >>= 6; |
627 | else if (in_group_p(ipcp->cgid) || in_group_p(ipcp->gid)) | 632 | else if (in_group_p(ipcp->cgid) || in_group_p(ipcp->gid)) |
628 | granted_mode >>= 3; | 633 | granted_mode >>= 3; |
@@ -784,6 +789,7 @@ struct kern_ipc_perm *ipcctl_pre_down(struct ipc_ids *ids, int id, int cmd, | |||
784 | struct ipc64_perm *perm, int extra_perm) | 789 | struct ipc64_perm *perm, int extra_perm) |
785 | { | 790 | { |
786 | struct kern_ipc_perm *ipcp; | 791 | struct kern_ipc_perm *ipcp; |
792 | uid_t euid; | ||
787 | int err; | 793 | int err; |
788 | 794 | ||
789 | down_write(&ids->rw_mutex); | 795 | down_write(&ids->rw_mutex); |
@@ -803,8 +809,10 @@ struct kern_ipc_perm *ipcctl_pre_down(struct ipc_ids *ids, int id, int cmd, | |||
803 | if (err) | 809 | if (err) |
804 | goto out_unlock; | 810 | goto out_unlock; |
805 | } | 811 | } |
806 | if (current->euid == ipcp->cuid || | 812 | |
807 | current->euid == ipcp->uid || capable(CAP_SYS_ADMIN)) | 813 | euid = current_euid(); |
814 | if (euid == ipcp->cuid || | ||
815 | euid == ipcp->uid || capable(CAP_SYS_ADMIN)) | ||
808 | return ipcp; | 816 | return ipcp; |
809 | 817 | ||
810 | err = -EPERM; | 818 | err = -EPERM; |