Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1344985

Re: [PATCH v2 1/1] OverlayFS: Fix checking permissions during lookup.

Show all headers | View raw

26.02.2016, 22:41, "Vivek Goyal" <vgoyal@redhat.com>:
>
> So what's the problem we are trying to solve. Why should we able to
> override the DAC checks of lower layer if same directory in upper
> is searchable for user but it is not searchable in lower layer.
>

If I right, this is a one of the main feature of overlayfs - upper layer has priority over lower ones.
Override AC checks necessary for lookup operation only. Lower layer files access AC checks
remain, so this should not be a security problem.
Sergey.

Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

[PATCH v2 1/1] OverlayFS: Fix checking permissions during lookup. Ignacy Gawędzki   <ignacy.gawedzki@green-communications.fr> - 2016-02-24 15:00 +0100
  Re: [PATCH v2 1/1] OverlayFS: Fix checking permissions during lookup. Vivek Goyal <vgoyal@redhat.com> - 2016-02-26 20:50 +0100
    Re: [PATCH v2 1/1] OverlayFS: Fix checking permissions during lookup. Nazarov Sergey <s-nazarov@yandex.ru> - 2016-02-27 12:00 +0100
      Re: [PATCH v2 1/1] OverlayFS: Fix checking permissions during lookup. Vivek Goyal <vgoyal@redhat.com> - 2016-02-29 17:40 +0100
    Re: [PATCH v2 1/1] OverlayFS: Fix checking permissions during lookup. Ignacy Gawędzki   <ignacy.gawedzki@green-communications.fr> - 2016-02-28 12:20 +0100
      Re: [PATCH v2 1/1] OverlayFS: Fix checking permissions during lookup. Vivek Goyal <vgoyal@redhat.com> - 2016-02-29 17:30 +0100
        Re: [PATCH v2 1/1] OverlayFS: Fix checking permissions during lookup. Ignacy Gawędzki   <ignacy.gawedzki@green-communications.fr> - 2016-02-29 18:00 +0100

csiph-web