Commit 95ace754 authored Nov 11, 2015 by Eric W. Biederman Committed by Jeff Layton Nov 16, 2015

locks: Don't allow mounts in user namespaces to enable mandatory locking



Since no one uses mandatory locking and files with mandatory locks can
cause problems don't allow them in user namespaces.

Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
Signed-off-by: Jeff Layton <jeff.layton@primarydata.com>

parent 9e8925b6

fs/namespace.c

+1 −1

Original line number	Original line	Diff line number	Diff line
	@@ -1589,7 +1589,7 @@ static inline bool may_mandlock(void)
	#ifndef CONFIG_MANDATORY_FILE_LOCKING		#ifndef CONFIG_MANDATORY_FILE_LOCKING
	return false;		return false;
	#endif		#endif
	return true;		return capable(CAP_SYS_ADMIN);
	}		}

	/*		/*