diff options
| author | Ian Bridges <icb@fastmail.org> | 2026-11-01 23:14:28 -0600 |
|---|---|---|
| committer | Namjae Jeon <linkinjeon@kernel.org> | 2026-11-02 18:06:03 +0900 |
| commit | c00ec7ad449b68c291a4986e481941302ed399c5 (patch) | |
| tree | 2e4dc674a88123e31ac1bb2e9c18ed8814bf79c7 /scripts/dummy-tools/python3 | |
| parent | 8296a64df5448548f410fb246c1d88a93609602b (diff) | |
ksmbd: grant a POSIX ACL group entry only to the group's members
When no ACE of the DACL matches the caller, Everyone or Authenticated
Users, smb_check_perm_dacl() falls back to the file's POSIX ACL. It
takes the first ACL_USER or ACL_GROUP entry whose id equals the
caller's uid. For ACL_GROUP, this compares a gid with the caller's uid.
A numerical match grants the group's permissions even when the caller
is not a member.
Match a group entry only when the caller is also in the group.
Fixes: e2f34481b24d ("cifsd: add server-side procedures for SMB3")
Reported-by: Namjae Jeon <linkinjeon@kernel.org>
Closes: https://lore.kernel.org/linux-cifs/CAKYAXd93czbFD=znZUq_pJLXzDR5N3zc_auvAGWT7pzKR1f9Ag@mail.gmail.com/
Cc: stable@vger.kernel.org
Signed-off-by: Ian Bridges <icb@fastmail.org>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Diffstat (limited to 'scripts/dummy-tools/python3')
0 files changed, 0 insertions, 0 deletions