[trusty CVE-2016-7097 v2 0/1] Fix for CVE-2016-7097

Juerg Haefliger juerg.haefliger at canonical.com
Wed Sep 6 15:51:14 UTC 2017


Changes v1->v2:
  - use capable_wrt_inode_uidgid()
  - add commit hash from 3.16.y to commit message
  
This is a backport from stable 3.16 merged with changes from the stable
3.2 backport. The Trusty 3.13 is missing some of the filesystems from 3.16
and there was some rearrangement of code in 3.16 that required special
handling, i.e., pull in the relevant changes from the 3.2 commit.


Jan Kara (1):
  posix_acl: Clear SGID bit when setting file permissions

 fs/9p/acl.c               | 40 +++++++++++++++++-----------------------
 fs/btrfs/acl.c            |  6 ++----
 fs/ext2/acl.c             | 12 ++++--------
 fs/ext3/acl.c             | 12 ++++--------
 fs/ext4/acl.c             | 12 ++++--------
 fs/f2fs/acl.c             |  6 ++----
 fs/generic_acl.c          | 15 ++++++++-------
 fs/gfs2/acl.c             | 16 +++++++---------
 fs/hfsplus/posix_acl.c    |  4 ++--
 fs/jffs2/acl.c            |  9 ++++-----
 fs/jfs/xattr.c            |  6 ++++--
 fs/ocfs2/acl.c            |  9 +++------
 fs/posix_acl.c            | 31 +++++++++++++++++++++++++++++++
 fs/reiserfs/xattr_acl.c   |  8 ++------
 fs/xfs/xfs_acl.c          | 17 +++++++----------
 include/linux/posix_acl.h |  1 +
 16 files changed, 102 insertions(+), 102 deletions(-)

-- 
2.14.1





More information about the kernel-team mailing list