diff options
| author | André Fabian Silva Delgado <emulatorman@parabola.nu> | 2016-09-17 02:25:44 -0300 |
|---|---|---|
| committer | André Fabian Silva Delgado <emulatorman@parabola.nu> | 2016-09-17 02:25:44 -0300 |
| commit | 5b465b045af3a649a89b8a5c5bfdece20ffc0345 (patch) | |
| tree | 934f851eaec863864e15fa7ef9514a445a9e88ff /fs/crypto/policy.c | |
| parent | 0520a938e11c34a5ffc422b9316b85e294b0fbb2 (diff) | |
Linux-libre 4.7.4-gnupck-4.7.4-gnu
Diffstat (limited to 'fs/crypto/policy.c')
| -rw-r--r-- | fs/crypto/policy.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/fs/crypto/policy.c b/fs/crypto/policy.c index 0f9961eed..f96547f83 100644 --- a/fs/crypto/policy.c +++ b/fs/crypto/policy.c @@ -95,10 +95,15 @@ static int create_encryption_context_from_policy(struct inode *inode, int fscrypt_process_policy(struct inode *inode, const struct fscrypt_policy *policy) { + if (!inode_owner_or_capable(inode)) + return -EACCES; + if (policy->version != 0) return -EINVAL; if (!inode_has_encryption_context(inode)) { + if (!S_ISDIR(inode->i_mode)) + return -EINVAL; if (!inode->i_sb->s_cop->empty_dir) return -EOPNOTSUPP; if (!inode->i_sb->s_cop->empty_dir(inode)) |