)]}' { "log": [ { "commit": "02c6be615f1fcd37ac5ed93a3ad6692ad8991cd9", "tree": "9c5047ed8b165a3388d5c61b2702f7cc12954766", "parents": [ "2850699c59d513a0cd0c68f60f75609a5f9d4d32" ], "author": { "name": "Miklos Szeredi", "email": "mszeredi@suse.cz", "time": "Thu May 01 04:34:45 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu May 01 08:03:59 2008 -0700" }, "message": "vfs: fix permission checking in sys_utimensat\n\nIf utimensat() is called with both times set to UTIME_NOW or one of them to\nUTIME_NOW and the other to UTIME_OMIT, then it will update the file time\nwithout any permission checking.\n\nI don\u0027t think this can be used for anything other than a local DoS, but could\nbe quite bewildering at that (e.g. \"Why was that large source tree rebuilt\nwhen I didn\u0027t modify anything???\")\n\nThis affects all kernels from 2.6.22, when the utimensat() syscall was\nintroduced.\n\nFix by doing the same permission checking as for the \"times \u003d\u003d NULL\" case.\n\nThanks to Michael Kerrisk, whose utimensat-non-conformances-and-fixes.patch in\n-mm also fixes this (and breaks other stuff), only he didn\u0027t realize the\nsecurity implications of this bug.\n\nSigned-off-by: Miklos Szeredi \u003cmszeredi@suse.cz\u003e\nCc: Ulrich Drepper \u003cdrepper@redhat.com\u003e\nCc: Michael Kerrisk \u003cmtk-manpages@gmx.net\u003e\nCc: \u003cstable@kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "74f9fdfa1f229284ee1ea58fa47f2cdeeb12f6fe", "tree": "6f368c91caf23e1795645d018c8ac971a4dceada", "parents": [ "cdb70f3f74b31576cc4d707a3d3b00d159cab8bb" ], "author": { "name": "Dave Hansen", "email": "haveblue@us.ibm.com", "time": "Fri Feb 15 14:37:42 2008 -0800" }, "committer": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Sat Apr 19 00:29:24 2008 -0400" }, "message": "[PATCH] r/o bind mounts: elevate write count for do_utimes()\n\nNow includes fix for oops seen by akpm.\n\n\"never let a libc developer write your kernel code\" - hch\n\n\"nor, apparently, a kernel developer\" - akpm\n\nAcked-by: Al Viro \u003cviro@ZenIV.linux.org.uk\u003e\nSigned-off-by: Christoph Hellwig \u003chch@lst.de\u003e\nCc: Valdis Kletnieks \u003cValdis.Kletnieks@vt.edu\u003e\nCc: Balbir Singh \u003cbalbir@in.ibm.com\u003e\nSigned-off-by: Dave Hansen \u003chaveblue@us.ibm.com\u003e\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\n" }, { "commit": "1d957f9bf87da74f420424d16ece005202bbebd3", "tree": "363d4770c0c74a536524c99ccd2762ce96ee9bbe", "parents": [ "4ac9137858e08a19f29feac4e1f4df7c268b0ba5" ], "author": { "name": "Jan Blunck", "email": "jblunck@suse.de", "time": "Thu Feb 14 19:34:35 2008 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Thu Feb 14 21:13:33 2008 -0800" }, "message": "Introduce path_put()\n\n* Add path_put() functions for releasing a reference to the dentry and\n vfsmount of a struct path in the right order\n\n* Switch from path_release(nd) to path_put(\u0026nd-\u003epath)\n\n* Rename dput_path() to path_put_conditional()\n\n[akpm@linux-foundation.org: fix cifs]\nSigned-off-by: Jan Blunck \u003cjblunck@suse.de\u003e\nSigned-off-by: Andreas Gruenbacher \u003cagruen@suse.de\u003e\nAcked-by: Christoph Hellwig \u003chch@lst.de\u003e\nCc: \u003clinux-fsdevel@vger.kernel.org\u003e\nCc: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nCc: Steven French \u003csfrench@us.ibm.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "4ac9137858e08a19f29feac4e1f4df7c268b0ba5", "tree": "f5b5d84fd12fcc2b0ba0e7ce1a79ff381ad8f5dd", "parents": [ "c5e725f33b733a77de622e91b6ba5645fcf070be" ], "author": { "name": "Jan Blunck", "email": "jblunck@suse.de", "time": "Thu Feb 14 19:34:32 2008 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Thu Feb 14 21:13:33 2008 -0800" }, "message": "Embed a struct path into struct nameidata instead of nd-\u003e{dentry,mnt}\n\nThis is the central patch of a cleanup series. In most cases there is no good\nreason why someone would want to use a dentry for itself. This series reflects\nthat fact and embeds a struct path into nameidata.\n\nTogether with the other patches of this series\n- it enforced the correct order of getting/releasing the reference count on\n \u003cdentry,vfsmount\u003e pairs\n- it prepares the VFS for stacking support since it is essential to have a\n struct path in every place where the stack can be traversed\n- it reduces the overall code size:\n\nwithout patch series:\n text data bss dec hex filename\n5321639 858418 715768 6895825 6938d1 vmlinux\n\nwith patch series:\n text data bss dec hex filename\n5320026 858418 715768 6894212 693284 vmlinux\n\nThis patch:\n\nSwitch from nd-\u003e{dentry,mnt} to nd-\u003epath.{dentry,mnt} everywhere.\n\n[akpm@linux-foundation.org: coding-style fixes]\n[akpm@linux-foundation.org: fix cifs]\n[akpm@linux-foundation.org: fix smack]\nSigned-off-by: Jan Blunck \u003cjblunck@suse.de\u003e\nSigned-off-by: Andreas Gruenbacher \u003cagruen@suse.de\u003e\nAcked-by: Christoph Hellwig \u003chch@lst.de\u003e\nCc: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nCc: Casey Schaufler \u003ccasey@schaufler-ca.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "12c2ab5e8fdfde67f3f6778a366cbdef06de410d", "tree": "181a80de95fe57517a74e5a08f4f7457b71910ff", "parents": [ "011e3fcd1e1f14ef54db30b93404ab7caa726477" ], "author": { "name": "Adrian Bunk", "email": "bunk@kernel.org", "time": "Wed Feb 06 01:36:47 2008 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Wed Feb 06 10:41:03 2008 -0800" }, "message": "fs/utimes.c should #include \u003clinux/syscalls.h\u003e\n\nEvery file should include the headers containing the prototypes for its global\nfunctions.\n\nSigned-off-by: Adrian Bunk \u003cbunk@kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "043f46f6151df2c518988b5e41376e42491257b5", "tree": "036f75b27d139408da721aaa75ed41a9b737a83d", "parents": [ "995e4286a047b32aebf8ce540908edb7fbd93f76" ], "author": { "name": "Miklos Szeredi", "email": "mszeredi@suse.cz", "time": "Tue Oct 16 23:27:07 2007 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Wed Oct 17 08:42:52 2007 -0700" }, "message": "VFS: check nanoseconds in utimensat\n\nutimensat() (and possibly other callers of do_utimes()) didn\u0027t check if the\nnanosecond value was within the allowed range.\n\nSigned-off-by: Miklos Szeredi \u003cmszeredi@suse.cz\u003e\nCc: Ulrich Drepper \u003cdrepper@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "3bd858ab1c451725c07a805dcb315215dc85b86e", "tree": "5d49c4300e350d64fd81eb3230b81f754117e0c1", "parents": [ "49c13b51a15f1ba9f6d47e26e4a3886c4f3931e2" ], "author": { "name": "Satyam Sharma", "email": "ssatyam@cse.iitk.ac.in", "time": "Tue Jul 17 15:00:08 2007 +0530" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Tue Jul 17 12:00:03 2007 -0700" }, "message": "Introduce is_owner_or_cap() to wrap CAP_FOWNER use with fsuid check\n\nIntroduce is_owner_or_cap() macro in fs.h, and convert over relevant\nusers to it. This is done because we want to avoid bugs in the future\nwhere we check for only effective fsuid of the current task against a\nfile\u0027s owning uid, without simultaneously checking for CAP_FOWNER as\nwell, thus violating its semantics.\n[ XFS uses special macros and structures, and in general looked ...\nuntouchable, so we leave it alone -- but it has been looked over. ]\n\nThe (current-\u003efsuid !\u003d inode-\u003ei_uid) check in generic_permission() and\nexec_permission_lite() is left alone, because those operations are\ncovered by CAP_DAC_OVERRIDE and CAP_DAC_READ_SEARCH. Similarly operations\nfalling under the purview of CAP_CHOWN and CAP_LEASE are also left alone.\n\nSigned-off-by: Satyam Sharma \u003cssatyam@cse.iitk.ac.in\u003e\nCc: Al Viro \u003cviro@ftp.linux.org.uk\u003e\nAcked-by: Serge E. Hallyn \u003cserge@hallyn.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "5b37696fda07b8acf37beba3853f83106397ccdf", "tree": "5f85c318eb7d76ce05adf504c4e209978a70ad47", "parents": [ "9793c3266755b4cae8915982825b2c07cd12e1c6" ], "author": { "name": "Satyam Sharma", "email": "ssatyam@cse.iitk.ac.in", "time": "Tue Jul 17 00:24:23 2007 +0530" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Mon Jul 16 12:14:08 2007 -0700" }, "message": "utime(s): Honour CAP_FOWNER when times\u003d\u003dNULL\n\ndo_utimes() does not honour CAP_FOWNER when times\u003d\u003dNULL.\nTrivial and obvious one-line fix.\n\nSigned-off-by: Satyam Sharma \u003cssatyam@cse.iitk.ac.in\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "1e5de2837c166535f9bb4232bfe97ea1f9fc7a1c", "tree": "333a9686bbebefd85e1854f1b234a0fc0f75d77b", "parents": [ "4e99325b462ba18075768582621af74a6b79d2a5" ], "author": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Sun Jul 08 12:02:55 2007 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Sun Jul 08 12:02:55 2007 -0700" }, "message": "Fix permission checking for the new utimensat() system call\n\nCommit 1c710c896eb461895d3c399e15bb5f20b39c9073 added the utimensat()\nsystem call, but didn\u0027t handle the case of checking for the writability\nof the target right, when the target was a file descriptor, not a\nfilename.\n\nWe cannot use vfs_permission(MAY_WRITE) for that case, and need to\nsimply check whether the file descriptor is writable. The oops from\nusing the wrong function was noticed and narrowed down by Markus\nTrippelsdorf.\n\nCc: Ulrich Drepper \u003cdrepper@redhat.com\u003e\nCc: Markus Trippelsdorf \u003cmarkus@trippelsdorf.de\u003e\nCc: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nAcked-by: Al Viro \u003cviro@ftp.linux.org.uk\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "1c710c896eb461895d3c399e15bb5f20b39c9073", "tree": "862e210cc6dad50abffd7640f01d50c3e9f3d375", "parents": [ "ade5fb818fb1861fd5f84619c761920ade762b5d" ], "author": { "name": "Ulrich Drepper", "email": "drepper@redhat.com", "time": "Tue May 08 00:33:25 2007 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Tue May 08 11:15:18 2007 -0700" }, "message": "utimensat implementation\n\nImplement utimensat(2) which is an extension to futimesat(2) in that it\n\na) supports nano-second resolution for the timestamps\nb) allows to selectively ignore the atime/mtime value\nc) allows to selectively use the current time for either atime or mtime\nd) supports changing the atime/mtime of a symlink itself along the lines\n of the BSD lutimes(3) functions\n\nFor this change the internally used do_utimes() functions was changed to\naccept a timespec time value and an additional flags parameter.\n\nAdditionally the sys_utime function was changed to match compat_sys_utime\nwhich already use do_utimes instead of duplicating the work.\n\nAlso, the completely missing futimensat() functionality is added. We have\nsuch a function in glibc but we have to resort to using /proc/self/fd/* which\nnot everybody likes (chroot etc).\n\nTest application (the syscall number will need per-arch editing):\n\n#include \u003cerrno.h\u003e\n#include \u003cfcntl.h\u003e\n#include \u003ctime.h\u003e\n#include \u003csys/time.h\u003e\n#include \u003cstddef.h\u003e\n#include \u003csyscall.h\u003e\n\n#define __NR_utimensat 280\n\n#define UTIME_NOW ((1l \u003c\u003c 30) - 1l)\n#define UTIME_OMIT ((1l \u003c\u003c 30) - 2l)\n\nint\nmain(void)\n{\n int status \u003d 0;\n\n int fd \u003d open(\"ttt\", O_RDWR|O_CREAT|O_EXCL, 0666);\n if (fd \u003d\u003d -1)\n error (1, errno, \"failed to create test file \\\"ttt\\\"\");\n\n struct stat64 st1;\n if (fstat64 (fd, \u0026st1) !\u003d 0)\n error (1, errno, \"fstat failed\");\n\n struct timespec t[2];\n t[0].tv_sec \u003d 0;\n t[0].tv_nsec \u003d 0;\n t[1].tv_sec \u003d 0;\n t[1].tv_nsec \u003d 0;\n if (syscall(__NR_utimensat, AT_FDCWD, \"ttt\", t, 0) !\u003d 0)\n error (1, errno, \"utimensat failed\");\n\n struct stat64 st2;\n if (fstat64 (fd, \u0026st2) !\u003d 0)\n error (1, errno, \"fstat failed\");\n\n if (st2.st_atim.tv_sec !\u003d 0 || st2.st_atim.tv_nsec !\u003d 0)\n {\n puts (\"atim not reset to zero\");\n status \u003d 1;\n }\n if (st2.st_mtim.tv_sec !\u003d 0 || st2.st_mtim.tv_nsec !\u003d 0)\n {\n puts (\"mtim not reset to zero\");\n status \u003d 1;\n }\n if (status !\u003d 0)\n goto out;\n\n t[0] \u003d st1.st_atim;\n t[1].tv_sec \u003d 0;\n t[1].tv_nsec \u003d UTIME_OMIT;\n if (syscall(__NR_utimensat, AT_FDCWD, \"ttt\", t, 0) !\u003d 0)\n error (1, errno, \"utimensat failed\");\n\n if (fstat64 (fd, \u0026st2) !\u003d 0)\n error (1, errno, \"fstat failed\");\n\n if (st2.st_atim.tv_sec !\u003d st1.st_atim.tv_sec\n || st2.st_atim.tv_nsec !\u003d st1.st_atim.tv_nsec)\n {\n puts (\"atim not set\");\n status \u003d 1;\n }\n if (st2.st_mtim.tv_sec !\u003d 0 || st2.st_mtim.tv_nsec !\u003d 0)\n {\n puts (\"mtim changed from zero\");\n status \u003d 1;\n }\n if (status !\u003d 0)\n goto out;\n\n t[0].tv_sec \u003d 0;\n t[0].tv_nsec \u003d UTIME_OMIT;\n t[1] \u003d st1.st_mtim;\n if (syscall(__NR_utimensat, AT_FDCWD, \"ttt\", t, 0) !\u003d 0)\n error (1, errno, \"utimensat failed\");\n\n if (fstat64 (fd, \u0026st2) !\u003d 0)\n error (1, errno, \"fstat failed\");\n\n if (st2.st_atim.tv_sec !\u003d st1.st_atim.tv_sec\n || st2.st_atim.tv_nsec !\u003d st1.st_atim.tv_nsec)\n {\n puts (\"mtim changed from original time\");\n status \u003d 1;\n }\n if (st2.st_mtim.tv_sec !\u003d st1.st_mtim.tv_sec\n || st2.st_mtim.tv_nsec !\u003d st1.st_mtim.tv_nsec)\n {\n puts (\"mtim not set\");\n status \u003d 1;\n }\n if (status !\u003d 0)\n goto out;\n\n sleep (2);\n\n t[0].tv_sec \u003d 0;\n t[0].tv_nsec \u003d UTIME_NOW;\n t[1].tv_sec \u003d 0;\n t[1].tv_nsec \u003d UTIME_NOW;\n if (syscall(__NR_utimensat, AT_FDCWD, \"ttt\", t, 0) !\u003d 0)\n error (1, errno, \"utimensat failed\");\n\n if (fstat64 (fd, \u0026st2) !\u003d 0)\n error (1, errno, \"fstat failed\");\n\n struct timeval tv;\n gettimeofday(\u0026tv,NULL);\n\n if (st2.st_atim.tv_sec \u003c\u003d st1.st_atim.tv_sec\n || st2.st_atim.tv_sec \u003e tv.tv_sec)\n {\n puts (\"atim not set to NOW\");\n status \u003d 1;\n }\n if (st2.st_mtim.tv_sec \u003c\u003d st1.st_mtim.tv_sec\n || st2.st_mtim.tv_sec \u003e tv.tv_sec)\n {\n puts (\"mtim not set to NOW\");\n status \u003d 1;\n }\n\n if (symlink (\"ttt\", \"tttsym\") !\u003d 0)\n error (1, errno, \"cannot create symlink\");\n\n t[0].tv_sec \u003d 0;\n t[0].tv_nsec \u003d 0;\n t[1].tv_sec \u003d 0;\n t[1].tv_nsec \u003d 0;\n if (syscall(__NR_utimensat, AT_FDCWD, \"tttsym\", t, AT_SYMLINK_NOFOLLOW) !\u003d 0)\n error (1, errno, \"utimensat failed\");\n\n if (lstat64 (\"tttsym\", \u0026st2) !\u003d 0)\n error (1, errno, \"lstat failed\");\n\n if (st2.st_atim.tv_sec !\u003d 0 || st2.st_atim.tv_nsec !\u003d 0)\n {\n puts (\"symlink atim not reset to zero\");\n status \u003d 1;\n }\n if (st2.st_mtim.tv_sec !\u003d 0 || st2.st_mtim.tv_nsec !\u003d 0)\n {\n puts (\"symlink mtim not reset to zero\");\n status \u003d 1;\n }\n if (status !\u003d 0)\n goto out;\n\n t[0].tv_sec \u003d 1;\n t[0].tv_nsec \u003d 0;\n t[1].tv_sec \u003d 1;\n t[1].tv_nsec \u003d 0;\n if (syscall(__NR_utimensat, fd, NULL, t, 0) !\u003d 0)\n error (1, errno, \"utimensat failed\");\n\n if (fstat64 (fd, \u0026st2) !\u003d 0)\n error (1, errno, \"fstat failed\");\n\n if (st2.st_atim.tv_sec !\u003d 1 || st2.st_atim.tv_nsec !\u003d 0)\n {\n puts (\"atim not reset to one\");\n status \u003d 1;\n }\n if (st2.st_mtim.tv_sec !\u003d 1 || st2.st_mtim.tv_nsec !\u003d 0)\n {\n puts (\"mtim not reset to one\");\n status \u003d 1;\n }\n\n if (status \u003d\u003d 0)\n puts (\"all OK\");\n\n out:\n close (fd);\n unlink (\"ttt\");\n unlink (\"tttsym\");\n\n return status;\n}\n\n[akpm@linux-foundation.org: add missing i386 syscall table entry]\nSigned-off-by: Ulrich Drepper \u003cdrepper@redhat.com\u003e\nCc: Alexey Dobriyan \u003cadobriyan@openvz.org\u003e\nCc: Michael Kerrisk \u003cmtk-manpages@gmx.net\u003e\nCc: \u003clinux-arch@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "914e26379decf1fd984b22e51fd2e4209b7a7f1b", "tree": "4f20ee40e959699e344cdff0e117d309d238f6be", "parents": [ "f6a570333e554b48ad589e7137c77c57809eee81" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Wed Oct 18 13:55:46 2006 -0400" }, "committer": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Mon Dec 04 02:00:24 2006 -0500" }, "message": "[PATCH] severing fs.h, radix-tree.h -\u003e sched.h\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\n" }, { "commit": "82b0547cfae1fb2ee26cad588f6d49a347d24740", "tree": "67575452152d0e51a573f66053c29c2028f3701e", "parents": [ "52978be636374c4bfb61220b37fa12f55a071c46" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Sat Sep 30 23:27:22 2006 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@g5.osdl.org", "time": "Sun Oct 01 00:39:19 2006 -0700" }, "message": "[PATCH] Create fs/utimes.c\n\n* fs/open.c is getting bit crowdy\n* preparation to lutimes(2)\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" } ] }