tree 8a0dcc98c25fb3eaa7270109a2c391fd1901a4ed
parent ef8e4a33c0b89677cb8f158413bff2fa594696f2
author Miklos Szeredi <mszeredi@redhat.com> 1628497187 +0200
committer Greg Kroah-Hartman <gregkh@linuxfoundation.org> 1629025505 +0200

ovl: prevent private clone if bind mount is not allowed

commit 427215d85e8d1476da1a86b8d67aceb485eb3631 upstream.

Add the following checks from __do_loopback() to clone_private_mount() as
well:

 - verify that the mount is in the current namespace

 - verify that there are no locked children

Reported-by: Alois Wohlschlager <alois1@gmx-topmail.de>
Fixes: c771d683a62e ("vfs: introduce clone_private_mount()")
Cc: <stable@vger.kernel.org> # v3.18
Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>