c/mirror_zfs
1
0
Fork 0
mirror of https://git.proxmox.com/git/mirror_zfs.git synced 2025-03-29 06:53:47 +03:00
Code Issues Packages Projects Releases Wiki Activity

Don't allow accessing XATTR via export handle

Browse Source 
Allow accessing XATTR through export handle is a very bad idea. It
would allow user to write whatever they want in fields where they
otherwise could not.

Signed-off-by: Chunwei Chen <david.chen@osnexus.com>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Issue #4828
This commit is contained in:
Chunwei Chen 2016-07-06 16:54:19 -07:00 committed by Brian Behlendorf
parent 061460dfe2
commit 7938c2aca7
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
module/zfs/zfs_vfsops.c
View File

@ -1540,6 +1540,14 @@ zfs_vget(struct super_block *sb, struct inode **ipp, fid_t *fidp)
ZFS_EXIT(zsb); ZFS_EXIT(zsb);
return (err); return (err);
} }
/* Don't export xattr stuff */
if (zp->z_pflags & ZFS_XATTR) {
iput(ZTOI(zp));
ZFS_EXIT(zsb);
return (SET_ERROR(ENOENT));
}
(void) sa_lookup(zp->z_sa_hdl, SA_ZPL_GEN(zsb), &zp_gen, (void) sa_lookup(zp->z_sa_hdl, SA_ZPL_GEN(zsb), &zp_gen,
sizeof (uint64_t)); sizeof (uint64_t));
zp_gen = zp_gen & gen_mask; zp_gen = zp_gen & gen_mask;