Re: [PATCH v2 0/3] fuse: Add support for mounts from pid/user namespaces

[Miklos Szeredi]

On Wed, Sep 24, 2014 at 7:10 PM, Eric W. Biederman
<ebiederm@xxxxxxxxxxxx> wrote:


> So in summary I see:
> - Low utility in being able to manipulate files with bad uids.
> - Bad uids are mostly likely malicious action.
> - make_bad_inode is trivial to analyze.
> - No impediments to change if I am wrong.
>
> So unless there is a compelling case, right now I would recommend
> returning -EIO initially.   That allows us to concentrate on the easier
> parts of this and it leaves the changes only in fuse.

The problem with marking the inode bad is that it will mark it bad for
all instances of this filesystem.  Including ones which are in a
namespace where the UIDs make perfect sense.

So that really doesn't look like a good solution.

Doing the check in inode_permission() might be too heavyweight, but
it's still the only one that looks sane.

Thanks,
Miklos
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/