tree fa2a425b8607586c11127ea35344d893e6a4a4f0
parent bfe01a5ba2490f299e1d2d5508cbbbadd897bbe9
author Andy Lutomirski <luto@amacapital.net> 1412796767 -0700
committer Andy Lutomirski <luto@amacapital.net> 1412796767 -0700

fs: Add a missing permission check to do_umount

Accessing do_remount_sb should require global CAP_SYS_ADMIN, but
only one of the two call sites was appropriately protected.

Fixes CVE-2014-7975.

Signed-off-by: Andy Lutomirski <luto@amacapital.net>