Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752884AbdDKRz5 (ORCPT ); Tue, 11 Apr 2017 13:55:57 -0400 Received: from mx1.redhat.com ([209.132.183.28]:46272 "EHLO mx1.redhat.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752086AbdDKRzx (ORCPT ); Tue, 11 Apr 2017 13:55:53 -0400 DMARC-Filter: OpenDMARC Filter v1.3.2 mx1.redhat.com E00DAC0567A1 Authentication-Results: ext-mx08.extmail.prod.ext.phx2.redhat.com; dmarc=none (p=none dis=none) header.from=redhat.com Authentication-Results: ext-mx08.extmail.prod.ext.phx2.redhat.com; spf=pass smtp.mailfrom=eblake@redhat.com DKIM-Filter: OpenDKIM Filter v2.11.0 mx1.redhat.com E00DAC0567A1 Subject: Re: [PATCH 1/2] vfs: implement fchmodat2() syscall To: Colin Walters , Greg Kurz , viro@zeniv.linux.org.uk References: <148830142269.7103.7429913851447595016.stgit@bahia> <99466bd0-48f2-1594-5392-5e6191d56ffa@redhat.com> <1491933162.45759.941552624.3722F8E8@webmail.messagingengine.com> Cc: linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org From: Eric Blake Openpgp: url=http://people.redhat.com/eblake/eblake.gpg Organization: Red Hat, Inc. Message-ID: <02954403-b546-0afe-39c7-23b7b05dece2@redhat.com> Date: Tue, 11 Apr 2017 12:55:51 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 In-Reply-To: <1491933162.45759.941552624.3722F8E8@webmail.messagingengine.com> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="cP9ATJTrfMITLxtg1KApkmJUPbVw7jKcN" X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.5.16 (mx1.redhat.com [10.5.110.32]); Tue, 11 Apr 2017 17:55:53 +0000 (UTC) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 2517 Lines: 66 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --cP9ATJTrfMITLxtg1KApkmJUPbVw7jKcN Content-Type: multipart/mixed; boundary="CtPsR3wSPCn5NetgPHIB71irnFQM7NPo9"; protected-headers="v1" From: Eric Blake To: Colin Walters , Greg Kurz , viro@zeniv.linux.org.uk Cc: linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org Message-ID: <02954403-b546-0afe-39c7-23b7b05dece2@redhat.com> Subject: Re: [PATCH 1/2] vfs: implement fchmodat2() syscall References: <148830142269.7103.7429913851447595016.stgit@bahia> <99466bd0-48f2-1594-5392-5e6191d56ffa@redhat.com> <1491933162.45759.941552624.3722F8E8@webmail.messagingengine.com> In-Reply-To: <1491933162.45759.941552624.3722F8E8@webmail.messagingengine.com> --CtPsR3wSPCn5NetgPHIB71irnFQM7NPo9 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 04/11/2017 12:52 PM, Colin Walters wrote: >=20 >=20 > On Tue, Feb 28, 2017, at 02:23 PM, Eric Blake wrote: >=20 >> Might also be worth mentioning that this patch is required in order to= >> solve CVE-2016-9602, per discussion at >> https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg06089.html >=20 > I only briefly looked at this, but can't `open(..., O_PATH)` be used to= solve > this today? O_PATH was the fallback that qemu used - but that's non-POSIX, which means we have to have a different solution for POSIX systems than for Linux systems, while waiting for Linux to catch up to POSIX. --=20 Eric Blake, Principal Software Engineer Red Hat, Inc. +1-919-301-3266 Virtualization: qemu.org | libvirt.org --CtPsR3wSPCn5NetgPHIB71irnFQM7NPo9-- --cP9ATJTrfMITLxtg1KApkmJUPbVw7jKcN Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: Public key at http://people.redhat.com/eblake/eblake.gpg Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBCAAGBQJY7RinAAoJEKeha0olJ0Nqz80H/i/1/R5IQHMwxZvUzT8sLVV2 Bajwu4buH6wAetk8/H86udMryEHQlVmJ+OHMz4My6Pgq3dQL217BWCP0IW4pvJ4/ 3NxrhqGDbNt7XKezr67XMIgO4TD9tTVZ6en5HaJUIsQv/jfitaMEne7cZeAUze3K CjaxsaJLs08Pckp86/3GupSPWQWUI7ks/l51w6EoghUfCUCkgnePyZjznozh7OUH HQ7YaeqRrEP4MpYLWTDVylrRuKDN9JUQwapG0VPSkWC//BXIY83f4xBP/Ged9Wh1 plEzJdpwiIDCOsnaSfW+QaU8OG+k8Uqdqud1GAmRmonVFEvlYZqf1LzOg7gprV0= =QNyw -----END PGP SIGNATURE----- --cP9ATJTrfMITLxtg1KApkmJUPbVw7jKcN--