]> git.kernelconcepts.de Git - karo-tx-linux.git/commit
Ban ecryptfs over ecryptfs
authorAl Viro <viro@zeniv.linux.org.uk>
Wed, 15 Feb 2012 21:10:52 +0000 (14:10 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sun, 4 Mar 2012 17:49:20 +0000 (09:49 -0800)
commitc07661f26a360e6b29c246786a15b5ee1a0235f3
tree0bfe3b5547fb9e9ee662a8b99fd40b327ed3a466
parent462808d8e21fcfa8e731d0cddd469d1ba92ac575
Ban ecryptfs over ecryptfs

(cherry picked from commit 4403158ba295c8e36f6736b1bb12d0f7e1923dac)

This is a seriously simplified patch from Eric Sandeen; copy of
rationale follows:
===
  mounting stacked ecryptfs on ecryptfs has been shown to lead to bugs
  in testing.  For crypto info in xattr, there is no mechanism for handling
  this at all, and for normal file headers, we run into other trouble:

  BUG: unable to handle kernel NULL pointer dereference at 0000000000000008
  IP: [<ffffffffa015b0b3>] ecryptfs_d_revalidate+0x43/0xa0 [ecryptfs]
  ...

  There doesn't seem to be any good usecase for this, so I'd suggest just
  disallowing the configuration.

  Based on a patch originally, I believe, from Mike Halcrow.
===

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Tim Gardner <tim.gardner@canonical.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/ecryptfs/main.c