filelocks: use mount idmapping for setlease permission check
authorSeth Forshee <sforshee@kernel.org>
Thu, 9 Mar 2023 20:39:09 +0000 (14:39 -0600)
committerChristian Brauner (Microsoft) <brauner@kernel.org>
Thu, 9 Mar 2023 21:36:12 +0000 (22:36 +0100)
commit42d0c4bdf753063b6eec55415003184d3ca24f6e
treeb8f797ca79f4b015cfc32421b75022386468e303
parentdc592190a5543c559010e09e8130a1af3f9068d3
filelocks: use mount idmapping for setlease permission check

A user should be allowed to take out a lease via an idmapped mount if
the fsuid matches the mapped uid of the inode. generic_setlease() is
checking the unmapped inode uid, causing these operations to be denied.

Fix this by comparing against the mapped inode uid instead of the
unmapped uid.

Fixes: 9caccd41541a ("fs: introduce MOUNT_ATTR_IDMAP")
Cc: stable@vger.kernel.org
Signed-off-by: Seth Forshee (DigitalOcean) <sforshee@kernel.org>
Signed-off-by: Christian Brauner (Microsoft) <brauner@kernel.org>
fs/locks.c