[PATCH] client: disallow unprivileged users to escalate root privileges
authorXiubo Li <xiubli@redhat.com>
Wed, 3 Apr 2024 11:02:08 +0000 (19:02 +0800)
committerChris Lamb <lamby@debian.org>
Fri, 6 Feb 2026 19:24:31 +0000 (11:24 -0800)
commitad152b4e99956c5dcdb0cfa4f52e7a8a0e1564b3
treead252619cc128834e01ccb0d4178b385aa94fea3
parent2bf7ed07cccdd6c7ad6d9eb8fff07442fdc7a14c
[PATCH] client: disallow unprivileged users to escalate root  privileges

An unprivileged user can `chmod 777` a directory owned by root
and gain access. Fix this bug and also add a test case for the
same.

Signed-off-by: Xiubo Li <xiubli@redhat.com>
Signed-off-by: Venky Shankar <vshankar@redhat.com>
origin: backport, https://github.com/ceph/ceph/commit/b6d85b595ea7c9e0fca10d5e77a48102110fe22c
bug-github-pull: https://github.com/ceph/ceph/pull/60314
bug: https://github.com/ceph/ceph/security/advisories/GHSA-89hm-qq33-2fjm
bug-debian: https://bugs.debian.org/1108410

Gbp-Pq: Name CVE-2025-52555-1.patch
src/client/Client.cc