[PATCH] client: disallow unprivileged users to escalate root privileges
authorXiubo Li <xiubli@redhat.com>
Wed, 3 Apr 2024 11:02:08 +0000 (19:02 +0800)
committerBastien Roucariès <rouca@debian.org>
Mon, 22 Sep 2025 20:55:44 +0000 (22:55 +0200)
commitaa32ed6f4514d40b4b0b91f84883afa8b4cf62cf
tree4dc0f7353806a9a97e63b42346219ee69160a7a2
parent9e8533671ae49c5db9bbabe3ef55a5a11427412b
[PATCH] client: disallow unprivileged users to escalate root  privileges

An unprivileged user can `chmod 777` a directory owned by root
and gain access. Fix this bug and also add a test case for the
same.

Signed-off-by: Xiubo Li <xiubli@redhat.com>
Signed-off-by: Venky Shankar <vshankar@redhat.com>
origin: backport, https://github.com/ceph/ceph/commit/b6d85b595ea7c9e0fca10d5e77a48102110fe22c
bug-github-pull: https://github.com/ceph/ceph/pull/60314
bug: https://github.com/ceph/ceph/security/advisories/GHSA-89hm-qq33-2fjm
bug-debian: https://bugs.debian.org/1108410

Gbp-Pq: Name CVE-2025-52555-1.patch
src/client/Client.cc