lkml.org 
[lkml]   [2007]   [Sep]   [21]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [patch 5/5] VFS: allow filesystem to override mknod capability checks
    On Fri, Sep 21, 2007 at 04:48:58PM +0200, Miklos Szeredi wrote:
    > Ah, OK. Well, that's what fuse would do with the above change. So
    > you are basically saying, the change is OK, but we want proper
    > unprivileged mounts first.

    Yes, that and that it should be a mount flag, not a file_system_type
    flag.

    > I'm sure we don't want it by default.
    >
    > For example if user bind mounts / onto /home/user/myroot (with 'nodev'
    > of couse), we still don't want mknod to work on that mount, for
    > obvious reasons.

    True, we'll have to deny it if there is any non-privilegued mount of
    the backing device possible. At this point it's getting rather nasty
    and I wonder whether it's really worth it..
    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2007-09-21 16:57    [W:0.019 / U:61.124 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site