[PATCH 07/11] fs: Allow CAP_SYS_ADMIN in s_user_ns to freeze and thaw filesystems
Miklos Szeredi
mszeredi at redhat.com
Wed Feb 14 12:28:12 UTC 2018
On Fri, Dec 22, 2017 at 3:32 PM, Dongsu Park <dongsu at kinvolk.io> wrote:
> From: Seth Forshee <seth.forshee at canonical.com>
>
> The user in control of a super block should be allowed to freeze
> and thaw it. Relax the restrictions on the FIFREEZE and FITHAW
> ioctls to require CAP_SYS_ADMIN in s_user_ns.
Why is this required for unprivileged fuse?
Fuse doesn't support freeze, so this seems to make no sense in the
context of this patchset.
Thanks,
Miklos
More information about the Containers
mailing list