userns: Check uid_map's opener's fsuid, not the current fsuid (e3211c12) · Commits · e / devices / android_kernel_xiaomi_markw

kernel/user_namespace.c

+2 −2

Original line number	Diff line number	Diff line
		@@ -797,12 +797,12 @@ static bool new_idmap_permitted(const struct file *file,
		u32 id = new_map->extent[0].lower_first;
		if (cap_setid == CAP_SETUID) {
		kuid_t uid = make_kuid(ns->parent, id);
		if (uid_eq(uid, current_fsuid()))
		if (uid_eq(uid, file->f_cred->fsuid))
		return true;
		}
		else if (cap_setid == CAP_SETGID) {
		kgid_t gid = make_kgid(ns->parent, id);
		if (gid_eq(gid, current_fsgid()))
		if (gid_eq(gid, file->f_cred->fsgid))
		return true;
		}
		}