diff options
| author | Bhavik Sachdev <b.sachdev1904@gmail.com> | 2025-11-29 14:41:20 +0530 |
|---|---|---|
| committer | Christian Brauner <brauner@kernel.org> | 2025-12-15 14:13:13 +0100 |
| commit | fccbe38a5d06dbe44bcd89196fe1d2c2272a1f4a (patch) | |
| tree | 09371344994850bdc0a3bf83ef58de4a13abb226 | |
| parent | 8f0b4cce4481fb22653697cced8d0d04027cb1e8 (diff) | |
statmount: permission check should return EPERM
Currently, statmount() returns ENOENT when caller is not CAP_SYS_ADMIN
in the user namespace owner of target mount namespace. This should be
EPERM instead.
Suggested-by: Miklos Szeredi <miklos@szeredi.hu>
Signed-off-by: Bhavik Sachdev <b.sachdev1904@gmail.com>
Link: https://patch.msgid.link/20251129091455.757724-2-b.sachdev1904@gmail.com
Signed-off-by: Christian Brauner <brauner@kernel.org>
| -rw-r--r-- | fs/namespace.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/fs/namespace.c b/fs/namespace.c index c58674a20cad..f6879f282dae 100644 --- a/fs/namespace.c +++ b/fs/namespace.c @@ -5780,7 +5780,7 @@ SYSCALL_DEFINE4(statmount, const struct mnt_id_req __user *, req, if (kreq.mnt_ns_id && (ns != current->nsproxy->mnt_ns) && !ns_capable_noaudit(ns->user_ns, CAP_SYS_ADMIN)) - return -ENOENT; + return -EPERM; ks = kmalloc(sizeof(*ks), GFP_KERNEL_ACCOUNT); if (!ks) |