Received: by 2002:a25:d7c1:0:0:0:0:0 with SMTP id o184csp4069048ybg; Fri, 25 Oct 2019 12:52:52 -0700 (PDT) X-Google-Smtp-Source: APXvYqzWE+y1sJLJ91NSGGP2J569nEre4oiMY7NvVWwaubS7oqSlYNppXbWx0pRAFmJZ6jVEJ7WU X-Received: by 2002:a17:906:9497:: with SMTP id t23mr5406498ejx.202.1572033171956; Fri, 25 Oct 2019 12:52:51 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1572033171; cv=none; d=google.com; s=arc-20160816; b=Gus3FYA1uULsbmLTS+9XaaJ5x7WOksJNQhcRX5ZMyR2dCR7u0QjMPEE1lV4XtMmIOb X6WRhan4UP/j9wPsIaf+qljiZRWM2rxHJXNImfDuNlsHgOsY5f+5zFYGR08UKI8z4yAl B0mlqo+nonT9IdWn8LjcEzBHiSaaQ8MTNQnlELlRupxvxcOAJOzToal3zssO6wboqJCT GfMGXg86TmyVUKUtypJJejbIV9cYkg4Kg1L0bGqeDF3OHaw8FqONM4mwWuUYIajS9MDP sVMcyRr9O+HFLLpwJI/kjzeiAC8ChvIut5hAuKC1QfHiSy7vuR3PSeilDPSEHv2znUFa 6UTg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:content-transfer-encoding:mime-version :message-id:date:subject:cc:to:from:dkim-signature; bh=Tawb+nccujPimrWiHS9Aa32LfRsfrtEJbJYur7m9f88=; b=0Sg/TlaqwsgBnDOuC+cUlYEdFFdSCVOFPylfqvbxs3Mxs0XevZGw5kgAeGP6JHSNW2 sMxmwMy7Oi+K3tiGq+doI96aUcoXVACCGC36CVT/zR/1M+T02VJxdIn081Ni036+G4gV 2Ke2fI3zphGtCyDnPPiTer935nXDVG0ylu2ydrlQK0Jwt2X/5w+NXYeNH2D7eX0Tqes9 +TjbTLHqEraqEwo13D+zLqQRz6MxOH+gNBorCt1LcbHCYtx7tgu6wi2Iu05rTNFzYVNQ e7AJ3SCB3Vz6JYobwdE6/UwUkigXrLV3vz2hQGpRAr/sbDndYVIDw4YrL4jcu2HaPR9T UuXg== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@redhat.com header.s=mimecast20190719 header.b=Ja2wLQeW; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=redhat.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id r12si2547107edi.272.2019.10.25.12.52.29; Fri, 25 Oct 2019 12:52:51 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=pass header.i=@redhat.com header.s=mimecast20190719 header.b=Ja2wLQeW; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=redhat.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S2439103AbfJYL3Y (ORCPT + 99 others); Fri, 25 Oct 2019 07:29:24 -0400 Received: from us-smtp-2.mimecast.com ([205.139.110.61]:32443 "EHLO us-smtp-delivery-1.mimecast.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S2436520AbfJYL3Y (ORCPT ); Fri, 25 Oct 2019 07:29:24 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1572002963; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=Tawb+nccujPimrWiHS9Aa32LfRsfrtEJbJYur7m9f88=; b=Ja2wLQeWVQJrin19JM6+yPFiicY0vegf5CZo5wOP8muVf8kf7gf/9QrSqltn47Bm28g3Si tqiQb6AUbcwifnrwrQqGp09meZdoAZ3WfDiSfpACz/bEyggZ3p4P4vGPCRtLtW4Fn2/ASn VZm1KyIeLl43sJtkJ/xezO5TXR3em/Q= Received: from mail-wr1-f69.google.com (mail-wr1-f69.google.com [209.85.221.69]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-270-pBW8gIx_Pk21ZreaPy6p_g-1; Fri, 25 Oct 2019 07:29:21 -0400 Received: by mail-wr1-f69.google.com with SMTP id 4so921568wrf.19 for ; Fri, 25 Oct 2019 04:29:21 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:mime-version :content-transfer-encoding; bh=+LV2TveLTnx1fiN/bkmnJtZ0B+hWPbHsr/HLlAeKi1Y=; b=quJh8zmuQJYg+D9NqeYkzleFIx88sxUc9fcNv5mrm5/DgF4wKwLGHUB+hYgh0mCu8v aPyyFp1m0z9XdQHeSg3CMcgKzQmrr6XZN+LIoczqt6esuPuBtDvYzmIsAIqxheqzwYWt YQnlj+4mE7eWLA4+wxcMV99Q38x2fTv7C+0qXlP/Vlc8Ko/BvY8bqWcWBFN+h2HfNOgI Upfq3/MyGuhEDTsGTIVjwjvMqHJJJYbBQwsBOpptFeUGkOIVpVhOcyNRM/D8hnhZrPOn e1ThU/LlsgSwJ9lHUha8ST44YLC9Ep6ULjWybsfykA3kfNIpb/ZTgR8E84i5ZeGLWrHG 0eIA== X-Gm-Message-State: APjAAAUSvr+nxK9wwSTrDKLw/353cXC1bXaUxEO5lHYu82AIKAjfEJoM pcvRvJn5trbjSWBGVN2kmiRKK4ZiNsM6+RjW6xYpVXxYneHw8ijNt8pOPphx0FuOHFXRlD6ILw0 lqRuATA6d0pkB2Go4ZKRQXykk X-Received: by 2002:adf:b1d1:: with SMTP id r17mr2546008wra.201.1572002960743; Fri, 25 Oct 2019 04:29:20 -0700 (PDT) X-Received: by 2002:adf:b1d1:: with SMTP id r17mr2545995wra.201.1572002960542; Fri, 25 Oct 2019 04:29:20 -0700 (PDT) Received: from miu.piliscsaba.redhat.com (185-79-95-246.pool.digikabel.hu. [185.79.95.246]) by smtp.gmail.com with ESMTPSA id l18sm3974080wrn.48.2019.10.25.04.29.19 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 25 Oct 2019 04:29:19 -0700 (PDT) From: Miklos Szeredi To: "Eric W . Biederman" Cc: linux-unionfs@vger.kernel.org, linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org Subject: [RFC PATCH 0/5] allow unprivileged overlay mounts Date: Fri, 25 Oct 2019 13:29:12 +0200 Message-Id: <20191025112917.22518-1-mszeredi@redhat.com> X-Mailer: git-send-email 2.21.0 MIME-Version: 1.0 X-MC-Unique: pBW8gIx_Pk21ZreaPy6p_g-1 X-Mimecast-Spam-Score: 0 Content-Type: text/plain; charset=WINDOWS-1252 Content-Transfer-Encoding: quoted-printable Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hi Eric, Can you please have a look at this patchset? The most interesting one is the last oneliner adding FS_USERNS_MOUNT; whether I'm correct in stating that this isn't going to introduce any holes, or not... Thanks, Miklos --- Miklos Szeredi (5): ovl: document permission model ovl: ignore failure to copy up unknown xattrs vfs: allow unprivileged whiteout creation ovl: user xattr ovl: unprivieged mounts Documentation/filesystems/overlayfs.txt | 44 +++++++++++++ fs/char_dev.c | 3 + fs/namei.c | 17 ++--- fs/overlayfs/copy_up.c | 34 +++++++--- fs/overlayfs/dir.c | 2 +- fs/overlayfs/export.c | 2 +- fs/overlayfs/inode.c | 39 ++++++------ fs/overlayfs/namei.c | 56 +++++++++-------- fs/overlayfs/overlayfs.h | 81 +++++++++++++++--------- fs/overlayfs/ovl_entry.h | 1 + fs/overlayfs/readdir.c | 5 +- fs/overlayfs/super.c | 53 +++++++++++----- fs/overlayfs/util.c | 82 +++++++++++++++++++++---- include/linux/device_cgroup.h | 3 + 14 files changed, 298 insertions(+), 124 deletions(-) --=20 2.21.0