mirror of
https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git
synced 2026-10-11 23:24:22 -04:00
f2fs: avoid selinux denial on CAP_SYS_RESOURCE
This fixes CAP_SYS_RESOURCE denial of selinux when using resgid, since it seems selinux reports it at the first place, but mostly we don't need to check this condition first. Reviewed-by: Chao Yu <yuchao0@huawei.com> Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
This commit is contained in:
parent
b6a06cbbb5
commit
162b27aec9
1 changed files with 2 additions and 2 deletions
|
|
@ -1607,13 +1607,13 @@ static inline bool __allow_reserved_blocks(struct f2fs_sb_info *sbi,
|
|||
return false;
|
||||
if (IS_NOQUOTA(inode))
|
||||
return true;
|
||||
if (capable(CAP_SYS_RESOURCE))
|
||||
return true;
|
||||
if (uid_eq(sbi->s_resuid, current_fsuid()))
|
||||
return true;
|
||||
if (!gid_eq(sbi->s_resgid, GLOBAL_ROOT_GID) &&
|
||||
in_group_p(sbi->s_resgid))
|
||||
return true;
|
||||
if (capable(CAP_SYS_RESOURCE))
|
||||
return true;
|
||||
return false;
|
||||
}
|
||||
|
||||
|
|
|
|||
Loading…
Reference in a new issue