Re: [PATCH bpf-next] bpf: use FS_USERNS_DELEGATABLE for bpffs
From: patchwork-bot+netdevbpf
Date: Tue Nov 03 2026 - 13:26:45 EST
Hello:
This patch was applied to bpf/bpf-next.git (master)
by Alexei Starovoitov <ast@xxxxxxxxxx>:
On Tue, 3 Nov 2026 11:14:05 +0100 you wrote:
> Instead of FS_USERNS_MOUNT we should use recently introduced [1]
> FS_USERNS_DELEGATABLE cause it better expresses what we
> really want to get there. Filesystem should not be allowed
> to be mounted by an unprivileged user, but at the same time
> we want to have sb->s_user_ns to point to the container's
> user namespace, at the same time superblock should be allowed
> be created only if capable(CAP_SYS_ADMIN) check is successful.
>
> [...]
Here is the summary with links:
- [bpf-next] bpf: use FS_USERNS_DELEGATABLE for bpffs
https://git.kernel.org/bpf/bpf-next/c/cd8a2d402273
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html