]> bbs.cooldavid.org Git - net-next-2.6.git/commit
git://bbs.cooldavid.org / net-next-2.6.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 5dd03f5) | patch
fanotify: limit the number of marks in a single fanotify group
authorEric Paris <eparis@redhat.com>
Thu, 28 Oct 2010 21:21:57 +0000 (17:21 -0400)
committerEric Paris <eparis@redhat.com>
Thu, 28 Oct 2010 21:22:14 +0000 (17:22 -0400)
commite7099d8a5a34d2876908a9fab4952dabdcfc5909
tree34f62d8ae23c4c115a0b615cd13e9ae7ddd28b42tree | snapshot (tar.bz2 tar.gz zip)
parent5dd03f55fd2f21916ce248bb2e68bbfb39d94fe5commit | diff
fanotify: limit the number of marks in a single fanotify group

There is currently no limit on the number of marks a given fanotify group
can have.  Since fanotify is gated on CAP_SYS_ADMIN this was not seen as
a serious DoS threat.  This patch implements a default of 8192, the same as
inotify to work towards removing the CAP_SYS_ADMIN gating and eliminating
the default DoS'able status.

Signed-off-by: Eric Paris <eparis@redhat.com>
fs/notify/fanotify/fanotify_user.c diff | blob | blame | history
include/linux/fsnotify_backend.h diff | blob | blame | history
Clone of davem's net-next-2.6 tree