438c84c2f0
Overlayfs is following redirects even when redirects are disabled. If this is unintentional (probably the majority of cases) then this can be a problem. E.g. upper layer comes from untrusted USB drive, and attacker crafts a redirect to enable read access to otherwise unreadable directories. If "redirect_dir=off", then turn off following as well as creation of redirects. If "redirect_dir=follow", then turn on following, but turn off creation of redirects (which is what "redirect_dir=off" does now). This is a backward incompatible change, so make it dependent on a config option. Reported-by: David Howells <dhowells@redhat.com> Signed-off-by: Miklos Szeredi <mszeredi@redhat.com> |
||
---|---|---|
.. | ||
caching | ||
cifs | ||
configfs | ||
nfs | ||
pohmelfs | ||
00-INDEX | ||
9p.txt | ||
adfs.txt | ||
affs.txt | ||
afs.txt | ||
autofs4-mount-control.txt | ||
autofs4.txt | ||
automount-support.txt | ||
befs.txt | ||
bfs.txt | ||
btrfs.txt | ||
ceph.txt | ||
coda.txt | ||
conf.py | ||
cramfs.txt | ||
dax.txt | ||
debugfs.txt | ||
devpts.txt | ||
directory-locking | ||
dlmfs.txt | ||
dnotify.txt | ||
ecryptfs.txt | ||
efivarfs.txt | ||
exofs.txt | ||
ext2.txt | ||
ext3.txt | ||
ext4.txt | ||
f2fs.txt | ||
fiemap.txt | ||
files.txt | ||
fscrypt.rst | ||
fuse.txt | ||
gfs2-glocks.txt | ||
gfs2-uevents.txt | ||
gfs2.txt | ||
hfs.txt | ||
hfsplus.txt | ||
hpfs.txt | ||
index.rst | ||
inotify.txt | ||
isofs.txt | ||
jfs.txt | ||
Locking | ||
locks.txt | ||
mandatory-locking.txt | ||
ncpfs.txt | ||
nilfs2.txt | ||
ntfs.txt | ||
ocfs2-online-filecheck.txt | ||
ocfs2.txt | ||
omfs.txt | ||
orangefs.txt | ||
overlayfs.txt | ||
path-lookup.md | ||
path-lookup.txt | ||
porting | ||
proc.txt | ||
qnx6.txt | ||
quota.txt | ||
ramfs-rootfs-initramfs.txt | ||
relay.txt | ||
romfs.txt | ||
seq_file.txt | ||
sharedsubtree.txt | ||
spufs.txt | ||
squashfs.txt | ||
sysfs-pci.txt | ||
sysfs-tagging.txt | ||
sysfs.txt | ||
sysv-fs.txt | ||
tmpfs.txt | ||
ubifs.txt | ||
udf.txt | ||
ufs.txt | ||
vfat.txt | ||
vfs.txt | ||
xfs-delayed-logging-design.txt | ||
xfs-self-describing-metadata.txt | ||
xfs.txt |