Re: [PATCH 00/34] fs: idmapped mounts

2020-11-09 Thread Alban Crequy
On Thu, Oct 29, 2020 at 5:37 PM Eric W. Biederman wrote: > > Aleksa Sarai writes: > > > On 2020-10-29, Eric W. Biederman wrote: > >> Christian Brauner writes: > >> > >> > Hey everyone, > >> > > >> > I vanished for a little while to focus on this work here so sorry for > >> > not being available

Re: [PATCH 00/34] fs: idmapped mounts

2020-11-03 Thread Serge E. Hallyn
On Fri, Oct 30, 2020 at 01:01:57PM +0100, Christian Brauner wrote: > On Thu, Oct 29, 2020 at 02:58:55PM -0700, Andy Lutomirski wrote: > > > > > > > On Oct 28, 2020, at 5:35 PM, Christian Brauner > > > wrote: > > > > > > Hey everyone, > > > > > > I vanished for a little while to focus on this

Re: [PATCH 00/34] fs: idmapped mounts

2020-11-03 Thread Andy Lutomirski
On Fri, Oct 30, 2020 at 5:02 AM Christian Brauner wrote: > > On Thu, Oct 29, 2020 at 02:58:55PM -0700, Andy Lutomirski wrote: > > > > > > > On Oct 28, 2020, at 5:35 PM, Christian Brauner > > > wrote: > > > > > > Hey everyone, > > > > > > I vanished for a little while to focus on this work here

Re: [PATCH 00/34] fs: idmapped mounts

2020-10-30 Thread Serge E. Hallyn
On Fri, Oct 30, 2020 at 10:07:48AM -0500, Seth Forshee wrote: > On Thu, Oct 29, 2020 at 11:37:23AM -0500, Eric W. Biederman wrote: > > First and foremost: A uid shift on write to a filesystem is a security > > bug waiting to happen. This is especially in the context of facilities > > like iouring,

Re: [PATCH 00/34] fs: idmapped mounts

2020-10-30 Thread Seth Forshee
On Thu, Oct 29, 2020 at 11:37:23AM -0500, Eric W. Biederman wrote: > First and foremost: A uid shift on write to a filesystem is a security > bug waiting to happen. This is especially in the context of facilities > like iouring, that play very agressive games with how process context > makes it to

Re: [PATCH 00/34] fs: idmapped mounts

2020-10-30 Thread Christian Brauner
On Thu, Oct 29, 2020 at 02:58:55PM -0700, Andy Lutomirski wrote: > > > > On Oct 28, 2020, at 5:35 PM, Christian Brauner > > wrote: > > > > Hey everyone, > > > > I vanished for a little while to focus on this work here so sorry for > > not being available by mail for a while. > > > > Since q

Re: [PATCH 00/34] fs: idmapped mounts

2020-10-29 Thread Serge E. Hallyn
On Thu, Oct 29, 2020 at 11:37:23AM -0500, Eric W. Biederman wrote: > Aleksa Sarai writes: > > > On 2020-10-29, Eric W. Biederman wrote: > >> Christian Brauner writes: > >> > >> > Hey everyone, > >> > > >> > I vanished for a little while to focus on this work here so sorry for > >> > not being

Re: [PATCH 00/34] fs: idmapped mounts

2020-10-29 Thread Andy Lutomirski
> On Oct 28, 2020, at 5:35 PM, Christian Brauner > wrote: > > Hey everyone, > > I vanished for a little while to focus on this work here so sorry for > not being available by mail for a while. > > Since quite a long time we have issues with sharing mounts between > multiple unprivileged con

Re: [PATCH 00/34] fs: idmapped mounts

2020-10-29 Thread Tycho Andersen
Hi Eric, On Thu, Oct 29, 2020 at 11:44:33AM -0500, Eric W. Biederman wrote: > Tycho Andersen writes: > > > Hi Eric, > > > > On Thu, Oct 29, 2020 at 10:47:49AM -0500, Eric W. Biederman wrote: > >> Christian Brauner writes: > >> > >> > Hey everyone, > >> > > >> > I vanished for a little while to

Re: [PATCH 00/34] fs: idmapped mounts

2020-10-29 Thread Tycho Andersen
On Thu, Oct 29, 2020 at 05:19:20PM +0100, Christian Brauner wrote: > This approach (always) seemed conceptually wrong to me. Like Tycho said > somewhere else this basically would act like a global variable which > isn't great. Elaborating on this a bit: the way Christian has organized this series

Re: [PATCH 00/34] fs: idmapped mounts

2020-10-29 Thread Stéphane Graber
On Thu, Oct 29, 2020 at 12:45 PM Eric W. Biederman wrote: > > Tycho Andersen writes: > > > Hi Eric, > > > > On Thu, Oct 29, 2020 at 10:47:49AM -0500, Eric W. Biederman wrote: > >> Christian Brauner writes: > >> > >> > Hey everyone, > >> > > >> > I vanished for a little while to focus on this wor

Re: [PATCH 00/34] fs: idmapped mounts

2020-10-29 Thread Eric W. Biederman
Lennart Poettering writes: > On Do, 29.10.20 10:47, Eric W. Biederman (ebied...@xmission.com) wrote: > >> Is that the use case you are looking at removing the need for >> systemd-homed to avoid chowning after lugging encrypted home directories >> from one system to another? Why would it be desir

Re: [PATCH 00/34] fs: idmapped mounts

2020-10-29 Thread Eric W. Biederman
Aleksa Sarai writes: > On 2020-10-29, Eric W. Biederman wrote: >> Christian Brauner writes: >> >> > Hey everyone, >> > >> > I vanished for a little while to focus on this work here so sorry for >> > not being available by mail for a while. >> > >> > Since quite a long time we have issues with

Re: [PATCH 00/34] fs: idmapped mounts

2020-10-29 Thread Sargun Dhillon
On Thu, Oct 29, 2020 at 05:05:02PM +0100, Lennart Poettering wrote: > On Do, 29.10.20 10:47, Eric W. Biederman (ebied...@xmission.com) wrote: > > > Is that the use case you are looking at removing the need for > > systemd-homed to avoid chowning after lugging encrypted home directories > > from on

Re: [PATCH 00/34] fs: idmapped mounts

2020-10-29 Thread Eric W. Biederman
Christian Brauner writes: > Hey everyone, > > I vanished for a little while to focus on this work here so sorry for > not being available by mail for a while. > > Since quite a long time we have issues with sharing mounts between > multiple unprivileged containers with different id mappings, shar

Re: [PATCH 00/34] fs: idmapped mounts

2020-10-29 Thread Eric W. Biederman
Tycho Andersen writes: > Hi Eric, > > On Thu, Oct 29, 2020 at 10:47:49AM -0500, Eric W. Biederman wrote: >> Christian Brauner writes: >> >> > Hey everyone, >> > >> > I vanished for a little while to focus on this work here so sorry for >> > not being available by mail for a while. >> > >> > Sin

Re: [PATCH 00/34] fs: idmapped mounts

2020-10-29 Thread Serge E. Hallyn
On Thu, Oct 29, 2020 at 10:12:31AM -0600, Tycho Andersen wrote: > Hi Eric, > > On Thu, Oct 29, 2020 at 10:47:49AM -0500, Eric W. Biederman wrote: > > Christian Brauner writes: > > > > > Hey everyone, > > > > > > I vanished for a little while to focus on this work here so sorry for > > > not bein

Re: [PATCH 00/34] fs: idmapped mounts

2020-10-29 Thread Tycho Andersen
Hi Eric, On Thu, Oct 29, 2020 at 10:47:49AM -0500, Eric W. Biederman wrote: > Christian Brauner writes: > > > Hey everyone, > > > > I vanished for a little while to focus on this work here so sorry for > > not being available by mail for a while. > > > > Since quite a long time we have issues wi

Re: [PATCH 00/34] fs: idmapped mounts

2020-10-29 Thread Christian Brauner
On Thu, Oct 29, 2020 at 01:27:33PM +1100, Dave Chinner wrote: > On Thu, Oct 29, 2020 at 01:32:18AM +0100, Christian Brauner wrote: > > Hey everyone, > > > > I vanished for a little while to focus on this work here so sorry for > > not being available by mail for a while. > > > > Since quite a lon

Re: [PATCH 00/34] fs: idmapped mounts

2020-10-29 Thread Aleksa Sarai
On 2020-10-29, Eric W. Biederman wrote: > Christian Brauner writes: > > > Hey everyone, > > > > I vanished for a little while to focus on this work here so sorry for > > not being available by mail for a while. > > > > Since quite a long time we have issues with sharing mounts between > > multip

Re: [PATCH 00/34] fs: idmapped mounts

2020-10-29 Thread Lennart Poettering
On Do, 29.10.20 10:47, Eric W. Biederman (ebied...@xmission.com) wrote: > Is that the use case you are looking at removing the need for > systemd-homed to avoid chowning after lugging encrypted home directories > from one system to another? Why would it be desirable to avoid the > chown? Yes, I

Re: [PATCH 00/34] fs: idmapped mounts

2020-10-29 Thread Sargun Dhillon
On Thu, Oct 29, 2020 at 01:32:18AM +0100, Christian Brauner wrote: > Hey everyone, > > I vanished for a little while to focus on this work here so sorry for > not being available by mail for a while. > > Since quite a long time we have issues with sharing mounts between > multiple unprivileged co

Re: [PATCH 00/34] fs: idmapped mounts

2020-10-29 Thread Dave Chinner
On Thu, Oct 29, 2020 at 01:32:18AM +0100, Christian Brauner wrote: > Hey everyone, > > I vanished for a little while to focus on this work here so sorry for > not being available by mail for a while. > > Since quite a long time we have issues with sharing mounts between > multiple unprivileged co

[PATCH 00/34] fs: idmapped mounts

2020-10-29 Thread Christian Brauner
Hey everyone, I vanished for a little while to focus on this work here so sorry for not being available by mail for a while. Since quite a long time we have issues with sharing mounts between multiple unprivileged containers with different id mappings, sharing a rootfs between multiple containers