Re: [GIT PULL] LSM patches for v6.1

[Linus Torvalds]

On Tue, Oct 4, 2022 at 1:37 PM Eric W. Biederman <ebiederm@xxxxxxxxxxxx> wrote:
>
> Please don't pull the user namespace bits of this code.

Eric, already done.

And I think you are in denial about how many problems the
user-namespace stuff has caused.

Distros are literally turning it off entirely because the whole "let
users create their own namespace" has *NOT* been a great success.

I personally think it was a mistake. We're stuck with it, but we most
definitely need knobs to manage it that isn't just "enable/disable
USER_NS" in the kernel config.

So this whole "don't do this" approach you have is not acceptable.

99% of all code does NOT WANT the user namespace thing, and it's been
a big new attack surface for the kernel getting things subtly wrong.

I do not understand your "people need to be able to do this with no
controls", when the alternative is to literally turn it off ENTIRELY.

I'm not saying that an LSM is the only place to do it, but I don't
think there have been any better suggestions either.

Put another way: your "no limits are acceptable" is simply not
realistic, and you haven't given any sane alternatives that I am aware
of. No way to say "sure, let trusted system apps create their
namespaces, but not random things".

                Linus