Messages in this thread | | | Date | Mon, 5 Oct 2015 09:26:21 -0500 | From | Seth Forshee <> | Subject | Re: [PATCH 1/5] fs: Verify access of user towards block device file when mounting |
| |
On Fri, Oct 02, 2015 at 01:07:00AM +0200, Jan Kara wrote: > On Thu 01-10-15 10:55:50, Eric W. Biederman wrote: > > The goal if possible is to run things like docker without needed to be > > root or even more fun to run docker in a container, and in general > > enable nested containers. > > Frankly at the filesystem side we are rather far from being able to safely > mount untrusted device and I don't think we'll ever be robust enough to > tolerate e.g. user changing the disk while fs is using it. So would this be > FUSE-only thing or is someone still hoping that general purpose filesystems > will be robust enough in future?
FUSE will almost certainly be first. I've also been working with ext4, and I would like to see that eventually supported to some degree.
Seth
| |