client: disallow unprivileged users to escalate root privileges
authorXiubo Li <xiubli@redhat.com>
Wed, 3 Apr 2024 11:02:08 +0000 (19:02 +0800)
committerSalvatore Bonaccorso <carnil@debian.org>
Sat, 16 May 2026 12:52:24 +0000 (14:52 +0200)
commit65445271e90660e27b2a8a7606b0ccb6d3bbb79d
tree5624958315ba7e3999fda49eba016f5fa1d619fa
parentcd16ac84fb36098a2d4fe4e898d134c8c59d9b25
client: disallow unprivileged users to escalate root privileges

Origin: https://github.com/ceph/ceph/commit/b6d85b595ea7c9e0fca10d5e77a48102110fe22c
Bug-Debian: https://bugs.debian.org/1108410
Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2025-52555

An unprivileged user can `chmod 777` a directory owned by root
and gain access. Fix this bug and also add a test case for the
same.

Signed-off-by: Xiubo Li <xiubli@redhat.com>
Signed-off-by: Venky Shankar <vshankar@redhat.com>
Gbp-Pq: Name client-disallow-unprivileged-users-to-escalate-root-.patch
src/client/Client.cc
src/test/libcephfs/suidsgid.cc