[Devel] [PATCH vz7] sys_renameat2: fix capabilities check to support containers

Stanislav Kinsburskiy skinsbursky at odin.com
Tue Oct 27 08:18:58 PDT 2015


From: Stanislav Kinsburskiy <skinsbursky at parallels.com>

Signed-off-by: Stanislav Kinsburskiy <skinsbursky at parallels.com>
---
 fs/namei.c |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/fs/namei.c b/fs/namei.c
index d3430ee..42224e6 100644
--- a/fs/namei.c
+++ b/fs/namei.c
@@ -4212,7 +4212,7 @@ SYSCALL_DEFINE5(renameat2, int, olddfd, const char __user *, oldname,
 	    (flags & RENAME_EXCHANGE))
 		return -EINVAL;
 
-	if ((flags & RENAME_WHITEOUT) && !capable(CAP_MKNOD))
+	if ((flags & RENAME_WHITEOUT) && !ve_capable(CAP_MKNOD))
 		return -EPERM;
 
 retry:




More information about the Devel mailing list