rgw: EPERM to ERR_INVALID_REQUEST

As per Robin's comments and S3 spec

Signed-off-by: Abhishek Lekshmanan <abhishek@suse.com>
Origin: upstream, https://github.com/ceph/ceph/pull/34504/commits/607a65fccd8a80c2f2c74853a6dc5c14ed8a75c1

Gbp-Pq: Name CVE-2020-1760-2.patch

diff --git a/src/rgw/rgw_rest_s3.cc b/src/rgw/rgw_rest_s3.cc
index 547e9056f0f62bac3665d33dd37afe2c6565c6a7..2edf586163901616cf87bb0fe66b2aae64f124d4 100644 (file)
--- a/src/rgw/rgw_rest_s3.cc
+++ b/src/rgw/rgw_rest_s3.cc
@@ -271,7 +271,7 @@ int RGWGetObj_ObjStore_S3::send_response_data(bufferlist& bl, off_t bl_ofs,
        /* reject unauthenticated response header manipulation, see
         * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html */
        if (s->auth.identity->is_anonymous()) {
-         return -EPERM;
+         return -ERR_INVALID_REQUEST;
        }
        if (strcmp(p->param, "response-content-type") != 0) {
          response_attrs[p->http_attr] = val;