ACK: [linux-aws][PATCH 0/1] LP:#1864669 - overlayfs regression - internal getxattr operations without sepolicy checking

[Kamal Mostafa]

Thanks, Marcelo.

Acked-by: Kamal Mostafa <kamal at canonical.com>

 -Kamal

On Thu, Jul 09, 2020 at 03:14:40PM -0300, Marcelo Henrique Cerri wrote:
> BugLink: https://bugs.launchpad.net/bugs/1864669
> 
> As bug description.
> 
> AWS users are also affected by this bug. This fix is already applied
> to the azure kernels for some time now without any regressions.
> 
> This patch was submitted to upstream as part of a bigger patchset that
> proposes to fix several individual issues. Since the patchset is
> currently stalled with no ETA to be accepted, I decided to backport
> just the necessary fix.
> 
> 4.15 required bigger changes since some of the affected pieces of code
> were missing or were different than upstream and I applied the
> equivalent changes to the corresponding area in that kernel. Besides
> that, all patches required a small change to remove XATTR_NOSECURITY
> since that was added by a previous patch on the same series.
> 
> That's a fix that potentially can be included to our main kernels. But
> consideroing this fix wasn't accepted upstream yet believe it might be
> safer to introduce this fix only to the affected kernels for now. That
> way we can reduce the regression potential.
> 
> ---
> Mark Salyzyn (1):
>   UBUNTU: SAUCE: overlayfs: internal getxattr operations without
>     sepolicy checking
> 
>  fs/overlayfs/namei.c     | 19 ++++++++++---------
>  fs/overlayfs/overlayfs.h |  7 +++++++
>  fs/overlayfs/util.c      |  8 ++++----
>  3 files changed, 21 insertions(+), 13 deletions(-)
> 
> -- 
> 2.25.1
> 
> 
> -- 
> kernel-team mailing list
> kernel-team at lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/kernel-team