# Re: \[RESEND PATCH v18 0/4\] overlayfs override\_creds=off \& nested get xattr fix

- From: Eric Biggers \<ebiggers@kernel.org\>
- Date: 2020-10-22 05:19:22 
- List: linux-security-module
- Page: https://ratatoskr.run/linux-security-module/2020/10/190985
- Thread: https://ratatoskr.run/linux-doc/2020/10/190959/t.md

```text
On Wed, Oct 21, 2020 at 08:18:59AM -0700, Mark Salyzyn wrote:
> Mark Salyzyn (3):
>   Add flags option to get xattr method paired to __vfs_getxattr
>   overlayfs: handle XATTR_NOSECURITY flag for get xattr method
>   overlayfs: override_creds=off option bypass creator_cred
> 
> Mark Salyzyn + John Stultz (1):
>   overlayfs: inode_owner_or_capable called during execv
> 
> The first three patches address fundamental security issues that should
> be solved regardless of the override_creds=off feature.
> 
> The fourth adds the feature depends on these other fixes.

FYI, I didn't receive patch 4, and neither https://lkml.kernel.org/linux-fsdevel
nor https://lkml.kernel.org/linux-unionfs have it either.

- Eric
```