]> git.ipfire.org Git - thirdparty/linux.git/commit
ksmbd: use opener credentials for ADS I/O
authorNamjae Jeon <linkinjeon@kernel.org>
Sat, 13 Jun 2026 13:00:03 +0000 (22:00 +0900)
committerSteve French <stfrench@microsoft.com>
Tue, 16 Jun 2026 23:57:22 +0000 (18:57 -0500)
commitbaa5e094886fffa7e6272edcb5e08be5ce28262c
tree62123f637087a4c919f74153ef688b10e592c9c2
parentcedff600f1642aa982178503552f0d007bc829c8
ksmbd: use opener credentials for ADS I/O

Alternate data streams are stored as xattrs. Unlike regular file I/O,
their read and write paths therefore call VFS xattr helpers which recheck
inode permissions and LSM policy using the current task credentials.

Run ADS I/O with the credentials captured when the SMB handle was opened.

Cc: stable@vger.kernel.org
Reported-by: Musaab Khan <musaab.khan@protonmail.com>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
fs/smb/server/vfs.c