Re: [RCF] [PATCH] unprivileged mount/umount

[Jamie Lokier]

Miklos Szeredi wrote:
> > I don't see the purpose of current->namespace and the associated mount
> > restrictions at all.  I asked Al Viro what it's for, but haven't seen
> > a reply :(  IMHO current->namespace should simply be removed, because the
> > "current namespace" is represented just fine by
> > current->fs->rootmnt->mnt_namespace.
> 
> I'll look at what it would take to remove current->namespace.

The security implications don't seem to be important.  If you don't
want someone to access a namespace, then don't make it accessible.

But knowing Al it might exist for some subtle locking reason.  Be sure
to study the locking carefully :)

-- Jamie
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/