mirror of
git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
synced 2025-09-04 20:19:47 +08:00
a1579f6bf6
Add a simple test to verify that the new "override_creds" option works. Link: https://lore.kernel.org/r/20250219-work-overlayfs-v3-4-46af55e4ceda@kernel.org Reviewed-by: Amir Goldstein <amir73il@gmail.com> Signed-off-by: Christian Brauner <brauner@kernel.org>
46 lines
893 B
C
46 lines
893 B
C
/* SPDX-License-Identifier: GPL-2.0 */
|
|
|
|
#ifndef __IDMAP_UTILS_H
|
|
#define __IDMAP_UTILS_H
|
|
|
|
#ifndef _GNU_SOURCE
|
|
#define _GNU_SOURCE
|
|
#endif
|
|
#include <errno.h>
|
|
#include <linux/types.h>
|
|
#include <sched.h>
|
|
#include <signal.h>
|
|
#include <stdbool.h>
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
#include <syscall.h>
|
|
#include <sys/capability.h>
|
|
#include <sys/fsuid.h>
|
|
#include <sys/types.h>
|
|
#include <unistd.h>
|
|
|
|
extern int get_userns_fd(unsigned long nsid, unsigned long hostid,
|
|
unsigned long range);
|
|
|
|
extern int caps_down(void);
|
|
extern int cap_down(cap_value_t down);
|
|
|
|
extern bool switch_ids(uid_t uid, gid_t gid);
|
|
|
|
static inline bool switch_userns(int fd, uid_t uid, gid_t gid, bool drop_caps)
|
|
{
|
|
if (setns(fd, CLONE_NEWUSER))
|
|
return false;
|
|
|
|
if (!switch_ids(uid, gid))
|
|
return false;
|
|
|
|
if (drop_caps && !caps_down())
|
|
return false;
|
|
|
|
return true;
|
|
}
|
|
|
|
#endif /* __IDMAP_UTILS_H */
|