Re: [PATCH v5 00/11] FUSE mounts from non-init user namespaces

2018-02-19 Thread Eric W. Biederman
Alban Crequy writes: > Hi Eric, > > Do you have some cycles for this now that it is the new year? > > A review on the associated ima issue would also be appreciated: > https://www.mail-archive.com/linux-kernel@vger.kernel.org/msg1587678.html It has taken me longer than I

Re: [PATCH v5 00/11] FUSE mounts from non-init user namespaces

2018-02-19 Thread Eric W. Biederman
Alban Crequy writes: > Hi Eric, > > Do you have some cycles for this now that it is the new year? > > A review on the associated ima issue would also be appreciated: > https://www.mail-archive.com/linux-kernel@vger.kernel.org/msg1587678.html It has taken me longer than I expected but I do have

Re: [PATCH v5 00/11] FUSE mounts from non-init user namespaces

2018-02-16 Thread Eric W. Biederman
Miklos Szeredi writes: > On Fri, Dec 22, 2017 at 3:32 PM, Dongsu Park wrote: > >> Patches 1-2 deal with an additional flag of lookup_bdev() to check for >> additional inode permission. > > fuse_blk is less suitable for unprivileged mounting than plain

Re: [PATCH v5 00/11] FUSE mounts from non-init user namespaces

2018-02-16 Thread Eric W. Biederman
Miklos Szeredi writes: > On Fri, Dec 22, 2017 at 3:32 PM, Dongsu Park wrote: > >> Patches 1-2 deal with an additional flag of lookup_bdev() to check for >> additional inode permission. > > fuse_blk is less suitable for unprivileged mounting than plain fuse. > fusermount doesn't allow mounting

Re: [PATCH v5 00/11] FUSE mounts from non-init user namespaces

2018-02-13 Thread Miklos Szeredi
On Fri, Dec 22, 2017 at 3:32 PM, Dongsu Park wrote: > Patches 1-2 deal with an additional flag of lookup_bdev() to check for > additional inode permission. fuse_blk is less suitable for unprivileged mounting than plain fuse. fusermount doesn't allow mounting fuse_blk

Re: [PATCH v5 00/11] FUSE mounts from non-init user namespaces

2018-02-13 Thread Miklos Szeredi
On Fri, Dec 22, 2017 at 3:32 PM, Dongsu Park wrote: > Patches 1-2 deal with an additional flag of lookup_bdev() to check for > additional inode permission. fuse_blk is less suitable for unprivileged mounting than plain fuse. fusermount doesn't allow mounting fuse_blk unprivileged, so there's

Re: [PATCH v5 00/11] FUSE mounts from non-init user namespaces

2018-01-18 Thread Alban Crequy
On Tue, Jan 9, 2018 at 4:05 PM, Dongsu Park wrote: > Hi, > > On Mon, Dec 25, 2017 at 8:05 AM, Eric W. Biederman > wrote: >> Dongsu Park writes: >> >>> This patchset v5 is based on work by Seth Forshee and Eric Biederman. >>> The

Re: [PATCH v5 00/11] FUSE mounts from non-init user namespaces

2018-01-18 Thread Alban Crequy
On Tue, Jan 9, 2018 at 4:05 PM, Dongsu Park wrote: > Hi, > > On Mon, Dec 25, 2017 at 8:05 AM, Eric W. Biederman > wrote: >> Dongsu Park writes: >> >>> This patchset v5 is based on work by Seth Forshee and Eric Biederman. >>> The latest patchset was v4: >>>

Re: [PATCH v5 00/11] FUSE mounts from non-init user namespaces

2018-01-09 Thread Dongsu Park
Hi, On Mon, Dec 25, 2017 at 8:05 AM, Eric W. Biederman wrote: > Dongsu Park writes: > >> This patchset v5 is based on work by Seth Forshee and Eric Biederman. >> The latest patchset was v4: >>

Re: [PATCH v5 00/11] FUSE mounts from non-init user namespaces

2018-01-09 Thread Dongsu Park
Hi, On Mon, Dec 25, 2017 at 8:05 AM, Eric W. Biederman wrote: > Dongsu Park writes: > >> This patchset v5 is based on work by Seth Forshee and Eric Biederman. >> The latest patchset was v4: >> https://www.mail-archive.com/linux-kernel@vger.kernel.org/msg1132206.html >> >> At the moment,

Re: [PATCH v5 00/11] FUSE mounts from non-init user namespaces

2017-12-24 Thread Eric W. Biederman
Dongsu Park writes: > This patchset v5 is based on work by Seth Forshee and Eric Biederman. > The latest patchset was v4: > https://www.mail-archive.com/linux-kernel@vger.kernel.org/msg1132206.html > > At the moment, filesystems backed by physical medium can only be mounted >

Re: [PATCH v5 00/11] FUSE mounts from non-init user namespaces

2017-12-24 Thread Eric W. Biederman
Dongsu Park writes: > This patchset v5 is based on work by Seth Forshee and Eric Biederman. > The latest patchset was v4: > https://www.mail-archive.com/linux-kernel@vger.kernel.org/msg1132206.html > > At the moment, filesystems backed by physical medium can only be mounted > by real root in the

[PATCH v5 00/11] FUSE mounts from non-init user namespaces

2017-12-22 Thread Dongsu Park
This patchset v5 is based on work by Seth Forshee and Eric Biederman. The latest patchset was v4: https://www.mail-archive.com/linux-kernel@vger.kernel.org/msg1132206.html At the moment, filesystems backed by physical medium can only be mounted by real root in the initial user namespace. This

[PATCH v5 00/11] FUSE mounts from non-init user namespaces

2017-12-22 Thread Dongsu Park
This patchset v5 is based on work by Seth Forshee and Eric Biederman. The latest patchset was v4: https://www.mail-archive.com/linux-kernel@vger.kernel.org/msg1132206.html At the moment, filesystems backed by physical medium can only be mounted by real root in the initial user namespace. This