]> git.apps.os.sepia.ceph.com Git - fscrypt.git/commit
projects / fscrypt.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1a47718) | patch
filesystem: reject spoofed login protectors
authorEric Biggers <ebiggers@google.com>
Wed, 23 Feb 2022 20:35:04 +0000 (12:35 -0800)
committerEric Biggers <ebiggers@google.com>
Wed, 23 Feb 2022 20:35:04 +0000 (12:35 -0800)
commitb44fbe71e1e93c47050322af51725bac997641e0
treee767abe05f8747bd44a839d76aa9e0d830dc0c0etree | snapshot
parent1a47718420317f893831b0223153d56005d5b02bcommit | diff
filesystem: reject spoofed login protectors

If a login protector contains a UID that differs from the file owner
(and the file owner is not root), it might be a spoofed file that was
created maliciously, so make sure to consider such files to be invalid.
filesystem/filesystem.go diff | blob | history
filesystem/filesystem_test.go diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.