diff options
| author | Jaegeuk Kim <jaegeuk@kernel.org> | 2019-03-14 02:15:08 +0300 |
|---|---|---|
| committer | Jaegeuk Kim <jaegeuk@kernel.org> | 2019-03-14 20:20:54 +0300 |
| commit | aff7b628ac2d58616b74789389ebb1e987081f49 (patch) | |
| tree | 96141937c85b75a4316170138414240337b02e9c /fs/f2fs/file.c | |
| parent | aadcef64b22f668c1a107b86d3521d9cac915c24 (diff) | |
| download | linux-aff7b628ac2d58616b74789389ebb1e987081f49.tar.xz | |
f2fs: set pin_file under CAP_SYS_ADMIN
Android uses pin_file for uncrypt during OTA, and that should be managed by
CAP_SYS_ADMIN only.
Reviewed-by: Chao Yu <yuchao0@huawei.com>
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
Diffstat (limited to 'fs/f2fs/file.c')
| -rw-r--r-- | fs/f2fs/file.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/fs/f2fs/file.c b/fs/f2fs/file.c index 807a97ad2430..012815d816e6 100644 --- a/fs/f2fs/file.c +++ b/fs/f2fs/file.c @@ -2873,8 +2873,8 @@ static int f2fs_ioc_set_pin_file(struct file *filp, unsigned long arg) __u32 pin; int ret = 0; - if (!inode_owner_or_capable(inode)) - return -EACCES; + if (!capable(CAP_SYS_ADMIN)) + return -EPERM; if (get_user(pin, (__u32 __user *)arg)) return -EFAULT; |