Commit b5b2e27c authored by Jann Horn's avatar Jann Horn Committed by Andy Whitcroft
Browse files

UBUNTU: SAUCE: proc: prevent stacking filesystems on top

BugLink: http://bugs.launchpad.net/bugs/1588871



This prevents stacking filesystems (ecryptfs and overlayfs)
from using procfs as lower filesystem. There is too much magic
going on inside procfs, and there is no good reason to stack
stuff on top of procfs.

(For example, procfs does access checks in VFS open handlers,
and ecryptfs by design calls open handlers from a kernel
thread that doesn't drop privileges or so.)

Signed-off-by: default avatarJann Horn <jannh@google.com>
Cc: stable@vger.kernel.org
CVE-2016-1583
Acked-by: default avatarTyler Hicks <tyhicks@canonical.com>
Acked-by: default avatarLuis Henriques <luis.henriques@canonical.com>
Signed-off-by: default avatarKamal Mostafa <kamal@canonical.com>
parent 1be0aa47
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment