diff options
| author | Richard Haines <richard_c_haines@btinternet.com> | 2020-02-20 15:32:34 +0000 |
|---|---|---|
| committer | Paul Moore <paul@paul-moore.com> | 2020-02-22 14:41:21 -0500 |
| commit | e4cfa05e9bfe286457082477b32ecd17737bdbce (patch) | |
| tree | f844348318e74758503b50f66ab066eeacb132d6 /security | |
| parent | c3a276111ea2572399281988b3129683e2a6b60b (diff) | |
| download | lwn-e4cfa05e9bfe286457082477b32ecd17737bdbce.tar.gz lwn-e4cfa05e9bfe286457082477b32ecd17737bdbce.zip | |
selinux: Add xfs quota command types
Add Q_XQUOTAOFF, Q_XQUOTAON and Q_XSETQLIM to trigger filesystem quotamod
permission check.
Add Q_XGETQUOTA, Q_XGETQSTAT, Q_XGETQSTATV and Q_XGETNEXTQUOTA to trigger
filesystem quotaget permission check.
Signed-off-by: Richard Haines <richard_c_haines@btinternet.com>
Reviewed-by: Christoph Hellwig <hch@lst.de>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Diffstat (limited to 'security')
| -rw-r--r-- | security/selinux/hooks.c | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c index 44f6f4e20cba..b8e09aedbc56 100644 --- a/security/selinux/hooks.c +++ b/security/selinux/hooks.c @@ -2145,11 +2145,18 @@ static int selinux_quotactl(int cmds, int type, int id, struct super_block *sb) case Q_QUOTAOFF: case Q_SETINFO: case Q_SETQUOTA: + case Q_XQUOTAOFF: + case Q_XQUOTAON: + case Q_XSETQLIM: rc = superblock_has_perm(cred, sb, FILESYSTEM__QUOTAMOD, NULL); break; case Q_GETFMT: case Q_GETINFO: case Q_GETQUOTA: + case Q_XGETQUOTA: + case Q_XGETQSTAT: + case Q_XGETQSTATV: + case Q_XGETNEXTQUOTA: rc = superblock_has_perm(cred, sb, FILESYSTEM__QUOTAGET, NULL); break; default: |