selinux: Add xfs quota command types (e4cfa05e) · Commits · 戴 / test

Add Q_XQUOTAOFF, Q_XQUOTAON and Q_XSETQLIM to trigger filesystem quotamod permission check. Add Q_XGETQUOTA, Q_XGETQSTAT, Q_XGETQSTATV and Q_XGETNEXTQUOTA to trigger filesystem quotaget permission check. Signed-off-by:

Richard Haines <richard_c_haines@btinternet.com> Reviewed-by:

Christoph Hellwig <hch@lst.de> Signed-off-by:

Paul Moore <paul@paul-moore.com>

security/selinux/hooks.c

+7 −0

Original line number	Diff line number	Diff line
		@@ -2145,11 +2145,18 @@ static int selinux_quotactl(int cmds, int type, int id, struct super_block *sb)
		case Q_QUOTAOFF:
		case Q_SETINFO:
		case Q_SETQUOTA:
		case Q_XQUOTAOFF:
		case Q_XQUOTAON:
		case Q_XSETQLIM:
		rc = superblock_has_perm(cred, sb, FILESYSTEM__QUOTAMOD, NULL);
		break;
		case Q_GETFMT:
		case Q_GETINFO:
		case Q_GETQUOTA:
		case Q_XGETQUOTA:
		case Q_XGETQSTAT:
		case Q_XGETQSTATV:
		case Q_XGETNEXTQUOTA:
		rc = superblock_has_perm(cred, sb, FILESYSTEM__QUOTAGET, NULL);
		break;
		default:

Admin message