Re: [PATCH RESEND v2 16/18] fuse: Support fuse filesystems outside of init_user_ns

From	Miklos Szeredi <miklos@szeredi.hu>
Newsgroups	linux.kernel
Subject	Re: [PATCH RESEND v2 16/18] fuse: Support fuse filesystems outside of init_user_ns
Date	2016-03-09 17:00 +0100
Message-ID	<raOGK-1uZ-7@gated-at.bofh.it> (permalink)
References	(1 earlier) <qNhJV-6ZN-43@gated-at.bofh.it> <raKts-7bN-1@gated-at.bofh.it> <raN7X-yK-1@gated-at.bofh.it> <raNB1-L2-27@gated-at.bofh.it> <raOdI-1eq-7@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Wed, Mar 9, 2016 at 4:25 PM, Seth Forshee <seth.forshee@canonical.com> wrote:
> On Wed, Mar 09, 2016 at 03:48:22PM +0100, Miklos Szeredi wrote:

>> Can't we use current_cred()->uid/gid? Or fsuid/fsgid maybe?
>
> That would be a departure from the current behavior in the !allow_other
> case for unprivileged users. Since those mounts are done by an suid
> helper all of those ids would be root in the userns, wouldn't they?

Well, actually this is what the helper does:

    sprintf(d, "fd=%i,rootmode=%o,user_id=%u,group_id=%u",
        fd, rootmode, getuid(), getgid());

So it just uses the current uid/gid.  Apparently no reason to do this
in userland, we could just as well set these in the kernel.  Except
for possible backward compatibility problems for things not using the
helper.

BUT if the mount is unprivileged or it's a userns mount, or anything
previously not possible, then we are not constrained by the backward
compatibility issues, and can go with the saner solution.

Does that not make sense?

>> When we have true unprivileged mounts, the user_id/group_id options
>> become redundant anyway and we can just use the current credentials.
>
> True, but we don't yet have that.

What's missing?

Thanks,
Miklos

Thread

Re: [PATCH RESEND v2 16/18] fuse: Support fuse filesystems outside  of init_user_ns Miklos Szeredi <miklos@szeredi.hu> - 2016-03-09 12:30 +0100
  Re: [PATCH RESEND v2 16/18] fuse: Support fuse filesystems outside  of init_user_ns Seth Forshee <seth.forshee@canonical.com> - 2016-03-09 15:20 +0100
    Re: [PATCH RESEND v2 16/18] fuse: Support fuse filesystems outside of init_user_ns Miklos Szeredi <miklos@szeredi.hu> - 2016-03-09 15:50 +0100
      Re: [PATCH RESEND v2 16/18] fuse: Support fuse filesystems outside  of init_user_ns Seth Forshee <seth.forshee@canonical.com> - 2016-03-09 16:30 +0100
        Re: [PATCH RESEND v2 16/18] fuse: Support fuse filesystems outside of init_user_ns Miklos Szeredi <miklos@szeredi.hu> - 2016-03-09 17:00 +0100
          Re: [PATCH RESEND v2 16/18] fuse: Support fuse filesystems outside  of init_user_ns Seth Forshee <seth.forshee@canonical.com> - 2016-03-09 18:10 +0100
            Re: [PATCH RESEND v2 16/18] fuse: Support fuse filesystems outside of init_user_ns Miklos Szeredi <miklos@szeredi.hu> - 2016-03-14 22:00 +0100

csiph-web