jfs: don't allow os2 xattr namespace overlap with others
authorDave Kleikamp <shaggy@linux.vnet.ibm.com>
Mon, 9 Aug 2010 20:57:38 +0000 (15:57 -0500)
committerGreg Kroah-Hartman <gregkh@suse.de>
Fri, 13 Aug 2010 20:50:38 +0000 (13:50 -0700)
commit8d026ff8f0ab31c83e67d617a9243cad1bf9f2d9
tree2ed513770747e6c4012e95764e38b6680acfa4cf
parentfb522b653dae079c79ce1cbaf32d307d3d4088f0
jfs: don't allow os2 xattr namespace overlap with others

commit aca0fa34bdaba39bfddddba8ca70dba4782e8fe6 upstream.

It's currently possible to bypass xattr namespace access rules by
prefixing valid xattr names with "os2.", since the os2 namespace stores
extended attributes in a legacy format with no prefix.

This patch adds checking to deny access to any valid namespace prefix
following "os2.".

Signed-off-by: Dave Kleikamp <shaggy@linux.vnet.ibm.com>
Reported-by: Sergey Vlasov <vsu@altlinux.ru>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
fs/jfs/xattr.c