[PATCH review 0/11] General unprivileged mount support · Eric W. Biederman <hidden> · 2016-07-02
[PATCH review 01/11] fs: Refuse uid/gid changes which don't map into s_user_ns · Eric W. Biederman <hidden> · 2016-07-02
[PATCH review 02/11] userns: Handle -1 in k[ug]id_has_mapping when !CONFIG_USER_NS · Eric W. Biederman <hidden> · 2016-07-02
[PATCH review 03/11] vfs: Verify acls are valid within superblock's s_user_ns. · Eric W. Biederman <hidden> · 2016-07-02
[PATCH review 04/11] fs: Check for invalid i_uid in may_follow_link() · Eric W. Biederman <hidden> · 2016-07-02
[PATCH review 05/11] cred: Reject inodes with invalid ids in set_create_file_as() · Eric W. Biederman <hidden> · 2016-07-02
[PATCH review 06/11] vfs: Don't modify inodes with a uid or gid unknown to the vfs · Eric W. Biederman <hidden> · 2016-07-02
[PATCH review 07/11] vfs: Don't create inodes with a uid or gid unknown to the vfs · Eric W. Biederman <hidden> · 2016-07-02
Re: [PATCH review 07/11] vfs: Don't create inodes with a uid or gid unknown to the vfs · Jan Kara <jack@suse.cz> · 2016-07-04
[PATCH review 08/11] quota: Ensure qids map to the filesystem · Eric W. Biederman <hidden> · 2016-07-02
[PATCH review 09/11] quota: Handle quota data stored in s_user_ns. · Eric W. Biederman <hidden> · 2016-07-02
[PATCH review 10/11] evm: Translate user/group ids relative to s_user_ns when computing HMAC · Eric W. Biederman <hidden> · 2016-07-02
[PATCH review 11/11] fs: Update i_[ug]id_(read|write) to translate relative to s_user_ns · Eric W. Biederman <hidden> · 2016-07-02
Re: [PATCH review 0/11] General unprivileged mount support · Jan Kara <jack@suse.cz> · 2016-07-04
Re: [PATCH review 0/11] General unprivileged mount support · Andy Lutomirski <luto@amacapital.net> · 2016-07-06
Re: [PATCH review 0/11] General unprivileged mount support · Andy Lutomirski <luto@amacapital.net> · 2016-07-06

Re: [PATCH review 0/11] General unprivileged mount support

From: Andy Lutomirski <hidden>
Date: 2016-07-06 14:02:00
Also in: linux-fsdevel

On Sat, Jul 2, 2016 at 10:18 AM, Eric W. Biederman
[off-list ref] wrote:

As well as in these patches the code is also available from:
git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace.git for-testing

It has been a long time in coming but recently in the userns tree the
superblock has been expanded with a s_user_ns field indicating the user
namespace that owns a superblock.

It would be nice if global root could mount otherwise-unsafe
filesystems with s_user_ns set to a non-init namespace.  Do you have
plans to allow that?

--Andy

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help