Re: [PATCH] exec: Add comments on check_unsafe_exec() fs counting

From: Christian Brauner
Date: Wed Oct 19 2022 - 07:59:24 EST


On Tue, Oct 18, 2022 at 12:17:24AM -0700, Kees Cook wrote:
> Add some comments about what the fs counting is doing in
> check_unsafe_exec() and how it relates to the call graph.
> Specifically, we can't force an unshare of the fs because
> of at least Chrome:
> https://lore.kernel.org/lkml/86CE201B-5632-4BB7-BCF6-7CB2C2895409@xxxxxxxxxxxx/
>
> Cc: Eric Biederman <ebiederm@xxxxxxxxxxxx>
> Cc: linux-fsdevel@xxxxxxxxxxxxxxx
> Signed-off-by: Kees Cook <keescook@xxxxxxxxxxxx>
> ---

Acked-by: Christian Brauner (Microsoft) <brauner@xxxxxxxxxx>