f2fs: set pin_file under CAP_SYS_ADMIN



Android uses pin_file for uncrypt during OTA, and that should be managed by
CAP_SYS_ADMIN only.

Reviewed-by: Chao Yu <yuchao0@huawei.com>
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>

parent 8b160a34

fs/f2fs/file.c

+2 −2

Original line number	Diff line number	Diff line
		@@ -2649,8 +2649,8 @@ static int f2fs_ioc_set_pin_file(struct file *filp, unsigned long arg)
		__u32 pin;
		int ret = 0;

		if (!inode_owner_or_capable(inode))
		return -EACCES;
		if (!capable(CAP_SYS_ADMIN))
		return -EPERM;

		if (get_user(pin, (__u32 __user *)arg))
		return -EFAULT;