Chirantan Ekbote 7b98502972 fs: Don't drop caps when changing UID ... Set the SECBIT_NO_SETUID_FIXUP securebit so that we don't lose capabilities when changing the thread uid/gid. This allows us to simplify the create and mkdir functions so that all the checks we currently carry out are only done once by the host kernel. To ensure that the setuid and setgid bits still get dropped when a file is modified by a process that doesn't hold CAP_FSETID, check for WRITE_KILL_PRIV in the write flags and temporarily drop CAP_FSETID when it is set. BUG=none TEST=Check that default posix acls, setgid bits, and file/directory creation via membership of a supplementary group all work as expected. Change-Id: I420484e357a970e997cb3e968a433278e82d8ad4 Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/2684067 Auto-Submit: Chirantan Ekbote <chirantan@chromium.org> Tested-by: kokoro <noreply+kokoro@google.com> Commit-Queue: Chirantan Ekbote <chirantan@chromium.org> Reviewed-by: Daniel Verkamp <dverkamp@chromium.org>		2021-03-12 04:11:58 +00:00
..
9p_device.policy	devices: p9: Update for API change	2020-11-04 14:37:23 +00:00
balloon_device.policy	devices: Use async from balloon	2021-02-12 18:27:45 +00:00
battery.policy	Goldfish battery: create a irq thread	2020-11-12 09:59:17 +00:00
block_device.policy	devices: Add an asynchronous block device	2021-02-17 04:11:55 +00:00
common_device.policy	tree-wide: seccomp: allow clock_nanosleep syscalls	2021-03-07 01:53:10 +00:00
cras_audio_device.policy	seccomp: remove redundant unconditional arm/arm64 rules	2020-02-04 23:27:21 +00:00
fs_device.policy	fs: Don't drop caps when changing UID	2021-03-12 04:11:58 +00:00
gpu_device.policy	tree-wide: seccomp: allow clock_nanosleep syscalls	2021-03-07 01:53:10 +00:00
input_device.policy	seccomp: remove redundant unconditional arm/arm64 rules	2020-02-04 23:27:21 +00:00
net_device.policy	seccomp: remove redundant unconditional arm/arm64 rules	2020-02-04 23:27:21 +00:00
null_audio_device.policy	seccomp: remove redundant unconditional arm/arm64 rules	2020-02-04 23:27:21 +00:00
pmem_device.policy	seccomp: remove redundant unconditional arm/arm64 rules	2020-02-04 23:27:21 +00:00
rng_device.policy	seccomp: remove redundant unconditional arm/arm64 rules	2020-02-04 23:27:21 +00:00
serial.policy	crosvm: Support UnixDatagram sockets for serial output.	2020-07-16 00:05:19 +00:00
tpm_device.policy	tree-wide: seccomp: allow clock_nanosleep syscalls	2021-03-07 01:53:10 +00:00
vhost_net_device.policy	seccomp: remove redundant unconditional arm/arm64 rules	2020-02-04 23:27:21 +00:00
vhost_vsock_device.policy	seccomp: remove redundant unconditional arm/arm64 rules	2020-02-04 23:27:21 +00:00
vios_audio_device.policy	tree-wide: seccomp: allow clock_nanosleep syscalls	2021-03-07 01:53:10 +00:00
wl_device.policy	seccomp: remove redundant unconditional arm/arm64 rules	2020-02-04 23:27:21 +00:00
xhci.policy	seccomp: allow USBDEVFS_CLEAR_HALT	2021-01-22 05:00:05 +00:00