[lkml]   [2009]   [Feb]   [13]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [PATCHv2 1/5] VFS: DazukoFS, stackable-fs, file access control

    On Friday 2009-02-13 20:31, John Ogness wrote:
    >If we want to forbid users from being able to do this, I think it
    >would be simpler just to fail the mount if it is _not_ specified for
    >direct stacking. This forces users to use a syntax that makes it very
    >clear what they are doing.
    >Since mounting to a different directory could cause problems, I think
    >it will be good to forbid it. I will make this change for the next
    >patch series.

    You could write an additional mount helper (and putting that into
    /sbin/mount.dazukofs) that does all the security checks:

    - that the device is the same as mountpoint
    - that the device belonging to the underlying '/mnt' is not
    mounted anywhere else (in this namespace, at least)
    - exit(1) otherwise

    Sure, it may not protect against all the cases Al can come up with,
    but it is better than having nothing.

     \ /
      Last update: 2009-02-13 21:03    [W:0.024 / U:0.836 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site