Ubuntu
linux package

Overview
Code
Bugs
Blueprints
Translations
Answers

Bug #1894980
Comment #3

Comment 3 for bug 1894980

Revision history for this message

Seth Forshee (sforshee) wrote on 2020-09-10: Re: [Bug 1894980] Re: CVE-2020-16120: unprivileged overlayfs permission checking

0001-Revert-UBUNTU-SAUCE-overlayfs-ensure-mounter-privile.patch Edit (3.9 KiB, text/x-diff; charset=us-ascii)
0002-ovl-pass-correct-flags-for-opening-real-directory.patch Edit (3.3 KiB, text/x-diff; charset=us-ascii)
0003-ovl-switch-to-mounter-creds-in-readdir.patch Edit (2.9 KiB, text/x-diff; charset=us-ascii)
0004-ovl-verify-permissions-in-ovl_path_open.patch Edit (2.2 KiB, text/x-diff; charset=us-ascii)
0005-ovl-call-secutiry-hook-in-ovl_real_ioctl.patch Edit (1.8 KiB, text/x-diff; charset=us-ascii)
0006-ovl-check-permission-to-open-real-file.patch Edit (2.0 KiB, text/x-diff; charset=us-ascii)

Attaching backports for focal. Note that I've also reverted the sauce
patch for CVE-2018-6559 as the backports make the permission checks
added in that patch redundant.

Ubuntulinux package

Comment 3 for bug 1894980

Ubuntu
linux package