The f_cred field of the file struct contains the cred of current at open time. This field can be used to get the context of open, and track current's cred changes after. The procfs is one of those fs that need to track current cred changes in order to implement proper permission checks on each system call. Set the seq_file->f_cred to file->f_cred during seq_open(). Cc: Kees Cook <keescook@xxxxxxxxxxxx> Cc: Eric W. Biederman <ebiederm@xxxxxxxxxxxx> Signed-off-by: Djalal Harouni <tixxdz@xxxxxxxxxx> --- fs/seq_file.c | 1 + 1 file changed, 1 insertion(+) diff --git a/fs/seq_file.c b/fs/seq_file.c index 3135c25..a5e5b98 100644 --- a/fs/seq_file.c +++ b/fs/seq_file.c @@ -57,6 +57,7 @@ int seq_open(struct file *file, const struct seq_operations *op) memset(p, 0, sizeof(*p)); mutex_init(&p->lock); p->op = op; + p->f_cred = file->f_cred; #ifdef CONFIG_USER_NS p->user_ns = file->f_cred->user_ns; #endif -- 1.7.11.7 -- To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
