diff options
| author | David Howells <dhowells@redhat.com> | 2025-01-07 18:34:50 +0000 |
|---|---|---|
| committer | Christian Brauner <brauner@kernel.org> | 2025-01-10 14:54:07 +0100 |
| commit | 3e914febd79a8d1a78ee6e67ff3fa4214d6d1d57 (patch) | |
| tree | c946b49553e9b25cf055f367afd6b7ea9a1c5e12 /fs/afs/cell.c | |
| parent | 92f08e9d3cf0f8005ac6fcb931e3c388efc3ac49 (diff) | |
| download | linux-next-3e914febd79a8d1a78ee6e67ff3fa4214d6d1d57.tar.gz linux-next-3e914febd79a8d1a78ee6e67ff3fa4214d6d1d57.zip | |
afs: Add rootcell checks
Add some checks for the validity of the cell name. It's may get put into a
symlink, so preclude it containing any slashes or "..". Also disallow
starting/ending with a dot. This makes /afs/@cell/ as a symlink less of a
security risk.
Also disallow multiple setting of /proc/net/afs/rootcell for any given
network namespace. Once set, the value may not be changed. This makes it
easier to only create /afs/@cell and /afs/.@cell if there's a rootcell.
Signed-off-by: David Howells <dhowells@redhat.com>
Link: https://lore.kernel.org/r/20250107183454.608451-3-dhowells@redhat.com
cc: Marc Dionne <marc.dionne@auristor.com>
cc: linux-afs@lists.infradead.org
Signed-off-by: Christian Brauner <brauner@kernel.org>
Diffstat (limited to 'fs/afs/cell.c')
| -rw-r--r-- | fs/afs/cell.c | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/fs/afs/cell.c b/fs/afs/cell.c index 1aba6d4d03a9..cee42646736c 100644 --- a/fs/afs/cell.c +++ b/fs/afs/cell.c @@ -367,6 +367,14 @@ int afs_cell_init(struct afs_net *net, const char *rootcell) len = cp - rootcell; } + if (len == 0 || !rootcell[0] || rootcell[0] == '.' || rootcell[len - 1] == '.') + return -EINVAL; + if (memchr(rootcell, '/', len)) + return -EINVAL; + cp = strstr(rootcell, ".."); + if (cp && cp < rootcell + len) + return -EINVAL; + /* allocate a cell record for the root cell */ new_root = afs_lookup_cell(net, rootcell, len, vllist, false); if (IS_ERR(new_root)) { |