linux-toradex.git/net/sunrpc/auth_unix.c, branch v3.10.43

sunrpc: Properly encode kuids and kgids in RPC_AUTH_UNIX credentials

2013-02-13T14:15:24+00:00

When writing kuids onto the wire first map them into the initial user
namespace.

When writing kgids onto the wire first map them into the initial user
namespace.

Cc: "J. Bruce Fields" 
Cc: Trond Myklebust 
Signed-off-by: "Eric W. Biederman"

sunrpc: Use gid_valid to test for gid != INVALID_GID

2013-02-13T14:15:20+00:00

In auth unix there are a couple of places INVALID_GID is used a
sentinel to mark the end of uc_gids array.  Use gid_valid
as a type safe way to verify we have not hit the end of
valid data in the array.

Cc: "J. Bruce Fields" 
Cc: Trond Myklebust 
Signed-off-by: "Eric W. Biederman"

sunrpc: Convert kuids and kgids to uids and gids for printing

2013-02-13T14:15:19+00:00

When printing kuids and kgids for debugging purpropses convert them
to ordinary integers so their values can be fed to the oridnary
print functions.

Cc: "J. Bruce Fields" 
Cc: Trond Myklebust 
Signed-off-by: "Eric W. Biederman"

sunrpc: Simplify auth_unix now that everything is a kgid_t

2013-02-13T14:15:18+00:00

In unx_create_cred directly assign gids from acred->group_info
to cred->uc_gids.

In unx_match directly compare uc_gids with group_info.

Now that both group_info and unx_cred gids are stored as kgids
this is valid and the extra layer of translation can be removed.

Cc: "J. Bruce Fields" 
Cc: Trond Myklebust 
Signed-off-by: "Eric W. Biederman"

sunrpc: Use uid_eq and gid_eq where appropriate

2013-02-13T14:15:17+00:00

When comparing uids use uid_eq instead of ==.
When comparing gids use gid_eq instead of ==.

And unfortunate cost of type safety.

Cc: "J. Bruce Fields" 
Cc: Trond Myklebust 
Signed-off-by: "Eric W. Biederman"

sunrpc: Use kuid_t and kgid_t where appropriate

2013-02-13T14:15:16+00:00

Convert variables that store uids and gids to be of type
kuid_t and kgid_t instead of type uid_t and gid_t.

Cc: "J. Bruce Fields" 
Cc: Trond Myklebust 
Signed-off-by: "Eric W. Biederman"

sunrpc: Use userns friendly constants.

2013-02-13T14:15:15+00:00

Instead of (uid_t)0 use GLOBAL_ROOT_UID.
Instead of (gid_t)0 use GLOBAL_ROOT_GID.
Instead of (uid_t)-1 use INVALID_UID
Instead of (gid_t)-1 use INVALID_GID.
Instead of NOGROUP use INVALID_GID.

Cc: "J. Bruce Fields" 
Cc: Trond Myklebust 
Signed-off-by: "Eric W. Biederman"

userns: Convert group_info values from gid_t to kgid_t.

2012-05-03T10:27:21+00:00

As a first step to converting struct cred to be all kuid_t and kgid_t
values convert the group values stored in group_info to always be
kgid_t values.   Unless user namespaces are used this change should
have no effect.

Acked-by: Serge Hallyn 
Signed-off-by: Eric W. Biederman

NFS/sunrpc: don't use a credential with extra groups.

2011-10-25T09:20:58+00:00

The sunrpc layer keeps a cache of recently used credentials and
'unx_match' is used to find the credential which matches the current
process.

However unx_match allows a match when the cached credential has extra
groups at the end of uc_gids list which are not in the process group list.

So if a process with a list of (say) 4 group accesses a file and gains
access because of the last group in the list, then another process
with the same uid and gid, and a gid list being the first tree of the
gids of the original process tries to access the file, it will be
granted access even though it shouldn't as the wrong rpc credential
will be used.

Signed-off-by: NeilBrown 
Signed-off-by: Trond Myklebust 
Cc: stable@vger.kernel.org

SUNRPC: Move the bound cred to struct rpc_rqst

2010-08-04T12:54:09+00:00

This will allow us to save the original generic cred in rpc_message, so
that if we migrate from one server to another, we can generate a new bound
cred without having to punt back to the NFS layer.

Signed-off-by: Trond Myklebust