Rob Landley <rob@xxxxxxxxxxx> writes:
> From: Rob Landley <rob@xxxxxxxxxxx>
>
> Mounting MS_NOUSER prevents --bind mounts from rootfs. Prevent new rootfs
> mounts with a different mechanism that doesn't affect bind mounts.
I don't see patches 4 and 5 so I don't know if you have covered this
elsewhere but a very important part of the reason for MS_NOUSER is to
prevent unmounting of rootfs.
The entire vfs breaks if you are allowed to unmount rootfs, and it
appears this patch is allowing that.