Messages in this thread |  | | | From | (Eric W. Biederman) | | Date | Thu, 02 Aug 2012 06:00:55 -0700 | | Subject | Re: [PATCH 1/3] implement uid and gid mount options for ext2 |
| |
Alan Cox <alan@lxorguk.ukuu.org.uk> writes:
>> +uid=n[:m] Make all files appear to belong to uid n. >> + Useful for e.g. removable media with fstab >> + options 'user,uid=useruid'. The optional second >> + uid m is actually written to the file system. > > So what happens if I insert a USB key containing a device node to the > hard disk ? Why is this functionality useful in the current form ? > > (ie I think you need an actual rational security model first)
> Also why is this at the per fs level duplicating stuff each time rather > than at the vfs level - this seems to be vfs level functionality.
Even more fun there is essentially a generic implementation in the user namespaces. What needs to be implemented to support this is support for mounting in a non-default user namespace, and then all of the mapping functionality is generic. Which I presume will imply MS_NODEV.
Eric
|  |