Re: [patch] unprivileged mounts update
From: H. Peter Anvin
Date: Wed Apr 25 2007 - 12:58:58 EST
Miklos Szeredi wrote:
> Andrew, please skip this patch, for now.
> Serge found a problem with the fsuid approach: setfsuid(nonzero) will
> remove filesystem related capabilities. So even if root is trying to
> set the "user=UID" flag on a mount, access to the target (and in case
> of bind, the source) is checked with user privileges.
> Root should be able to set this flag on any mountpoint, _regardless_
> of permissions.
Right, if you're using fsuid != 0, you're not running as root (fsuid is
the equivalent to euid for the filesystem.)
I fail to see how ruid should have *any* impact on mount(2). That seems
to be a design flaw.
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/