Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.kernel > #1237825

Re: [PATCH 1/5] fs: Verify access of user towards block device file when mounting

From Jan Kara <jack@suse.cz>
Newsgroups linux.kernel
Subject Re: [PATCH 1/5] fs: Verify access of user towards block device file when mounting
Date 2015-10-02 01:10 +0200
Message-ID <qeV98-2d3-19@gated-at.bofh.it> (permalink)
References (1 earlier) <qew14-758-13@gated-at.bofh.it> <qezih-3gr-9@gated-at.bofh.it> <qeLCO-4xp-21@gated-at.bofh.it> <qeMpc-66l-5@gated-at.bofh.it> <qeOAH-15a-33@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On Thu 01-10-15 10:55:50, Eric W. Biederman wrote:
> The goal if possible is to run things like docker without needed to be
> root or even more fun to run docker in a container, and in general
> enable nested containers.

Frankly at the filesystem side we are rather far from being able to safely
mount untrusted device and I don't think we'll ever be robust enough to
tolerate e.g. user changing the disk while fs is using it. So would this be
FUSE-only thing or is someone still hoping that general purpose filesystems
will be robust enough in future?

								Honza
-- 
Jan Kara <jack@suse.com>
SUSE Labs, CR
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Back to linux.kernel | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

[PATCH 1/5] fs: Verify access of user towards block device file when mounting Seth Forshee <seth.forshee@canonical.com> - 2015-09-30 22:20 +0200
  Re: [PATCH 1/5] fs: Verify access of user towards block device file  when mounting Mike Snitzer <snitzer@redhat.com> - 2015-10-01 01:50 +0200
    Re: [PATCH 1/5] fs: Verify access of user towards block device file  when mounting Seth Forshee <seth.forshee@canonical.com> - 2015-10-01 15:00 +0200
      Re: [PATCH 1/5] fs: Verify access of user towards block device file  when mounting Mike Snitzer <snitzer@redhat.com> - 2015-10-01 15:50 +0200
        Re: [PATCH 1/5] fs: Verify access of user towards block device file  when mounting Seth Forshee <seth.forshee@canonical.com> - 2015-10-01 16:50 +0200
        Re: [PATCH 1/5] fs: Verify access of user towards block device file when mounting ebiederm@xmission.com (Eric W. Biederman) - 2015-10-01 18:10 +0200
          Re: [PATCH 1/5] fs: Verify access of user towards block device file  when mounting Jan Kara <jack@suse.cz> - 2015-10-02 01:10 +0200
            Re: [PATCH 1/5] fs: Verify access of user towards block device file  when mounting Seth Forshee <seth.forshee@canonical.com> - 2015-10-05 16:30 +0200
  Re: [PATCH 1/5] fs: Verify access of user towards block device file when mounting ebiederm@xmission.com (Eric W. Biederman) - 2015-10-01 17:50 +0200
    Re: [PATCH 1/5] fs: Verify access of user towards block device file  when mounting Seth Forshee <seth.forshee@canonical.com> - 2015-10-01 18:00 +0200

csiph-web