Commit 95ace754 authored by Eric W. Biederman's avatar Eric W. Biederman Committed by Jeff Layton
Browse files

locks: Don't allow mounts in user namespaces to enable mandatory locking 



Since no one uses mandatory locking and files with mandatory locks can
cause problems don't allow them in user namespaces.

Signed-off-by: default avatar"Eric W. Biederman" <ebiederm@xmission.com>
Signed-off-by: default avatarJeff Layton <jeff.layton@primarydata.com>
parent 9e8925b6

fs/namespace.c

+1 −1
Original line number Diff line number Diff line
@@ -1589,7 +1589,7 @@ static inline bool may_mandlock(void) 
#ifndef	CONFIG_MANDATORY_FILE_LOCKING

	return false;

#endif

	return true;

	return capable(CAP_SYS_ADMIN);

}



/*