[patch] unprivileged mounts update

Andrew Morton akpm at linux-foundation.org
Wed Apr 25 12:33:46 PDT 2007


On Wed, 25 Apr 2007 17:18:12 +0200 Miklos Szeredi <miklos at szeredi.hu> wrote:

> > From: Miklos Szeredi <mszeredi at suse.cz>
> > 
> > - refine adding "nosuid" and "nodev" flags for unprivileged mounts:
> >     o add "nosuid", only if mounter doesn't have CAP_SETUID capability
> >     o add "nodev", only if mounter doesn't have CAP_MKNOD capability
> > 
> > - allow unprivileged forced unmount, but only for FS_SAFE filesystems
> > 
> > - allow mounting over special files, but not symlinks
> > 
> > - for mounting and umounting check "fsuid" instead of "ruid"
> 
> Andrew, please skip this patch, for now.

I'll be dropping all the unprivileged-mounts stuff - it looks like it
was a bit early, and that a new patch series against 2.6.27-rc1 or thereabouts
would be best.


More information about the Containers mailing list