[PATCH 07/11] fs: Allow CAP_SYS_ADMIN in s_user_ns to freeze and thaw filesystems

Miklos Szeredi mszeredi at redhat.com
Wed Feb 14 12:28:12 UTC 2018


On Fri, Dec 22, 2017 at 3:32 PM, Dongsu Park <dongsu at kinvolk.io> wrote:
> From: Seth Forshee <seth.forshee at canonical.com>
>
> The user in control of a super block should be allowed to freeze
> and thaw it. Relax the restrictions on the FIFREEZE and FITHAW
> ioctls to require CAP_SYS_ADMIN in s_user_ns.

Why is this required for unprivileged fuse?

Fuse doesn't support freeze, so this seems to make no sense in the
context of this patchset.

Thanks,
Miklos


More information about the Containers mailing list