| commit | 427215d85e8d1476da1a86b8d67aceb485eb3631 | [log] [tgz] |
|---|---|---|
| author | Miklos Szeredi <mszeredi@redhat.com> | Mon Aug 09 10:19:47 2021 +0200 |
| committer | Miklos Szeredi <mszeredi@redhat.com> | Tue Aug 10 10:21:31 2021 +0200 |
| tree | 36a42e8bcacadc0e2ebb4f6abfc44fecc87efbcf | |
| parent | 580c610429b3994e8db24418927747cf28443cde [diff] |
ovl: prevent private clone if bind mount is not allowed
Add the following checks from __do_loopback() to clone_private_mount() as
well:
- verify that the mount is in the current namespace
- verify that there are no locked children
Reported-by: Alois Wohlschlager <alois1@gmx-topmail.de>
Fixes: c771d683a62e ("vfs: introduce clone_private_mount()")
Cc: <stable@vger.kernel.org> # v3.18
Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>