| From | Richard Weinberger <> | Subject | [PATCH 13/26] ubifs: Enforce crypto policy in mmap | Date | Fri, 21 Oct 2016 14:48:28 +0200 |
| |
We need this extra check in mmap because a process could gain an already opened fd.
Signed-off-by: Richard Weinberger <richard@nod.at> --- fs/ubifs/file.c | 9 +++++++++ 1 file changed, 9 insertions(+)
diff --git a/fs/ubifs/file.c b/fs/ubifs/file.c index fc79278969e5..bd0049788e24 100644 --- a/fs/ubifs/file.c +++ b/fs/ubifs/file.c @@ -1594,6 +1594,15 @@ static const struct vm_operations_struct ubifs_file_vm_ops = { static int ubifs_file_mmap(struct file *file, struct vm_area_struct *vma) { int err; + struct inode *inode = file->f_mapping->host; + + if (ubifs_crypt_is_encrypted(inode)) { + err = fscrypt_get_encryption_info(inode); + if (err) + return -EACCES; + if (!fscrypt_has_encryption_key(inode)) + return -ENOKEY; + } err = generic_file_mmap(file, vma); if (err) -- 2.7.3
|