Merge git://git.kernel.org/pub/scm/linux/kernel/git/cmetcalf/linux-tile

[deliverable/linux.git] / fs / orangefs / devorangefs-req.c

diff --git a/fs/orangefs/devorangefs-req.c b/fs/orangefs/devorangefs-req.c
index db170beba7974c3d5d4491df452f0d75ca15ea13..a287a66d94e35189c2f7e226570e76d6e24f5925 100644 (file)
--- a/fs/orangefs/devorangefs-req.c
+++ b/fs/orangefs/devorangefs-req.c
@@ -116,6 +116,13 @@ static int orangefs_devreq_open(struct inode *inode, struct file *file)
 {
        int ret = -EINVAL;
 
+       /* in order to ensure that the filesystem driver sees correct UIDs */
+       if (file->f_cred->user_ns != &init_user_ns) {
+               gossip_err("%s: device cannot be opened outside init_user_ns\n",
+                          __func__);
+               goto out;
+       }
+
        if (!(file->f_flags & O_NONBLOCK)) {
                gossip_err("%s: device cannot be opened in blocking mode\n",
                           __func__);