Messages in this thread | | | Date | Tue, 26 Apr 2005 10:01:45 -0500 | From | Eric Van Hensbergen <> | Subject | Re: [PATCH] private mounts |
| |
On 4/26/05, Miklos Szeredi <miklos@szeredi.hu> wrote: > > that complicates things a great deal, however -- if you split the > > concept of "srv points" from file system mounts and remount the file > > system (perhaps automatically as part of initiating the session) for > > every new login -- then you can revalidate security at each of these > > mounts. > > Why would you have to revalidate? A simple bind mount would suffice. > However, joining another sessions namespace makes more sense, than > copying the mounts individually. >
Well, the forced revalidation was an attempt to protect "user-data" from root, which, as you pointed out in your reply, is a somewhat sketchy thing. It may also be useful if you wish to share a filesystem/namespace with a subset of users with a permissions model outside of the normal user/groups model (which the user doesn't really have any control over).
Anyways, just an additional idea for consideration -- as I said, I don't really feel a strong need for this, so perhaps its best forgotten for now.
-eric - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |