rcu pathwalk: prevent bogus hard errors from may_lookup()
authorAl Viro <viro@zeniv.linux.org.uk>
Sat, 30 Sep 2023 01:11:41 +0000 (21:11 -0400)
committerAl Viro <viro@zeniv.linux.org.uk>
Sun, 25 Feb 2024 07:10:31 +0000 (02:10 -0500)
commitcdb67fdeed72248475b1c849699495ef290a1634
treee420dff77379ba8197a12b172b94320df2a81dcc
parent583340de1d8b2d6a474eccd5e7d9f7f42f061e1b
rcu pathwalk: prevent bogus hard errors from may_lookup()

If lazy call of ->permission() returns a hard error, check that
try_to_unlazy() succeeds before returning it.  That both makes
life easier for ->permission() instances and closes the race
in ENOTDIR handling - it is possible that positive d_can_lookup()
seen in link_path_walk() applies to the state *after* unlink() +
mkdir(), while nd->inode matches the state prior to that.

Normally seeing e.g. EACCES from permission check in rcu pathwalk
means that with some timings non-rcu pathwalk would've run into
the same; however, running into a non-executable regular file
in the middle of a pathname would not get to permission check -
it would fail with ENOTDIR instead.

Reviewed-by: Christian Brauner <brauner@kernel.org>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
fs/namei.c