mirror of
https://github.com/tbsdtv/linux_media.git
synced 2025-07-23 04:33:26 +02:00
SUNRPC: Cache the process user cred in the RPC server listener
In order to be able to interpret uids and gids correctly in knfsd, we should cache the user namespace of the process that created the RPC server's listener. To do so, we refcount the credential of that process. Signed-off-by: Trond Myklebust <trond.myklebust@hammerspace.com> Signed-off-by: J. Bruce Fields <bfields@redhat.com>
This commit is contained in:
committed by
J. Bruce Fields
parent
e333f3bbef
commit
4df493a260
@@ -1332,13 +1332,14 @@ EXPORT_SYMBOL_GPL(svc_alien_sock);
|
||||
* @fd: file descriptor of the new listener
|
||||
* @name_return: pointer to buffer to fill in with name of listener
|
||||
* @len: size of the buffer
|
||||
* @cred: credential
|
||||
*
|
||||
* Fills in socket name and returns positive length of name if successful.
|
||||
* Name is terminated with '\n'. On error, returns a negative errno
|
||||
* value.
|
||||
*/
|
||||
int svc_addsock(struct svc_serv *serv, const int fd, char *name_return,
|
||||
const size_t len)
|
||||
const size_t len, const struct cred *cred)
|
||||
{
|
||||
int err = 0;
|
||||
struct socket *so = sockfd_lookup(fd, &err);
|
||||
@@ -1371,6 +1372,7 @@ int svc_addsock(struct svc_serv *serv, const int fd, char *name_return,
|
||||
salen = kernel_getsockname(svsk->sk_sock, sin);
|
||||
if (salen >= 0)
|
||||
svc_xprt_set_local(&svsk->sk_xprt, sin, salen);
|
||||
svsk->sk_xprt.xpt_cred = get_cred(cred);
|
||||
svc_add_new_perm_xprt(serv, &svsk->sk_xprt);
|
||||
return svc_one_sock_name(svsk, name_return, len);
|
||||
out:
|
||||
|
Reference in New Issue
Block a user