Received: by 2002:a05:6a11:4021:0:0:0:0 with SMTP id ky33csp703342pxb; Tue, 14 Sep 2021 07:02:19 -0700 (PDT) X-Google-Smtp-Source: ABdhPJwXiSUi4MTfUxtYrlEPUaKvamZDF3YPv70p+QHdRg57ma6FT+8eSlRhMLRNsZiXhnGx/g0I X-Received: by 2002:a02:2402:: with SMTP id f2mr14583771jaa.28.1631628139055; Tue, 14 Sep 2021 07:02:19 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1631628139; cv=none; d=google.com; s=arc-20160816; b=iu6a/sGsu1dSTNNxkhRgimpbvXZH+eIi46T38gH1lZlovNPKC77BI7LE66nFWuzs6b ap52GoSGp11D8lRz9BDpH+pVkEDAZDUZN65Hpf0BWYEmyIMLNjoseccpa3ws+XZFLewp L9Tm1TzFFKkr70l1kNLaqM7N9m8gD3qtpAemt02Hg8tUXRBUf25zMEGd3Yomt2fTG2iq YYlE2AzBcKh74l3yVlR4pPQEcEOnO79Ab1jlsxWrtaCRYgURcTiNJxF91Xp2GcfxFvOE QiQDO0zUiz6giIokVHdRLxX2IG6egEfSrHy0gfEnFoFkDoZq/zz3NYvruO9jznrpKuIr 0Wdw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:dkim-signature; bh=kaya3EDVq+i2kEee2RcyRm9vp7G1d6PEMiE8V6O0cGg=; b=oemEu4GPmBexWxLpV93a8ySzgCGSquX8PA4htipL9KAE5y8t3CcEC9r2myAo1A9BFn buiVww3660ERiK6a1VAA8vQ7Ua5FHju4vlnr5ajNQdxV8AKAIqMN8Lk0DXEu3REeO/By KZvHzMoe+ISW7RUuMGreRMKfKY1sgBi13rlrnXsjbK6RO6FTqQdM22Sa0B7tJREHlyWh +5VFSU5fk7kVaGj9RfipsEq7AS4xGM7K/+EVwsnpvN9eu327RRsBkk+3VamIQBCIfgSA g9yUDce/5dDbLYoUrOFV03H6xoEn2e5yIj1usruMmMt6tdLrsE49p4FoJYiYmklFf0IU XFmg== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@redhat.com header.s=mimecast20190719 header.b=OoZkV1uo; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=redhat.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id c32si10087608jaa.44.2021.09.14.07.01.37; Tue, 14 Sep 2021 07:02:19 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@redhat.com header.s=mimecast20190719 header.b=OoZkV1uo; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=redhat.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S232989AbhINOAu (ORCPT + 99 others); Tue, 14 Sep 2021 10:00:50 -0400 Received: from us-smtp-delivery-124.mimecast.com ([170.10.133.124]:56000 "EHLO us-smtp-delivery-124.mimecast.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S233309AbhINOAu (ORCPT ); Tue, 14 Sep 2021 10:00:50 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1631627972; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=kaya3EDVq+i2kEee2RcyRm9vp7G1d6PEMiE8V6O0cGg=; b=OoZkV1uoe7bBEP32yxu+BlkeeR9otGOqfoAKEkf/x0V8c3zncIOvd6xIdsaOKNXXHuhHkH Az2UOrSHlGjpsRjB78cooBtlL7K0MMuVbMhzwycrS5V3VbpbSG0XOsp16NCxG6xwn95B+l kR6wmbDU8wF2mVljXRBuh+FpQEzovQs= Received: from mail-il1-f198.google.com (mail-il1-f198.google.com [209.85.166.198]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-288-1wcb5AK_PHq5D8N8YbqxQA-1; Tue, 14 Sep 2021 09:59:31 -0400 X-MC-Unique: 1wcb5AK_PHq5D8N8YbqxQA-1 Received: by mail-il1-f198.google.com with SMTP id f16-20020a92cb50000000b002376905517dso3132260ilq.18 for ; Tue, 14 Sep 2021 06:59:31 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=kaya3EDVq+i2kEee2RcyRm9vp7G1d6PEMiE8V6O0cGg=; b=shUW8524CUJPY+SHz69gKEX/ciqydXfekMLfJQDgmgPFfViE90GK2FcYLiSWYNZZEQ ehbg/87aEOWDBKXnUJzSVbev5IdAvJOOOQ4VvjkHw4Roaf7xsncUPBsMUrdEgGpXhXz2 v1gqDIh38UwH31Yx48SyUkCvdbINwEoW2egIxbYsleWY7qDj+pq71gs0MVxOQYyvIAn8 Pp1X7pe50W8Ki/Ugkz4fd1gxbHaquslAqGgEmFogUv9KFqzQ3nb6od7l6UIcJbFdFmaV orS01vC2oYMGNutfhWPjVonH/phundcxH4Abt66iikYpVPl3yTyMdRaYH+wyVm+skh/F 4GFw== X-Gm-Message-State: AOAM531MP61jU+Sn+h2/f9FNQGdY8Qwc9YrNccZS7GRUWWuDDe3xbnTo +64a2pK5OwsNgwwne+bvVxHBRMpCVQlY/q9uZRuKDzokz7In9aTByapwG6zE3pFt3r+TzRf4105 oXEwL0V+RHlcp8Gpuc72FJmKwIP3AGJ3Dqq/ym/OV X-Received: by 2002:a05:6638:1606:: with SMTP id x6mr14896507jas.25.1631627970921; Tue, 14 Sep 2021 06:59:30 -0700 (PDT) X-Received: by 2002:a05:6638:1606:: with SMTP id x6mr14896484jas.25.1631627970753; Tue, 14 Sep 2021 06:59:30 -0700 (PDT) MIME-Version: 1.0 References: <20210902152228.665959-1-vgoyal@redhat.com> <79dcd300-a441-cdba-e523-324733f892ca@schaufler-ca.com> <3bca47d0-747d-dd49-a03f-e0fa98eaa2f7@schaufler-ca.com> <1f33e6ef-e896-09ef-43b1-6c5fac40ba5f@schaufler-ca.com> <496e92bf-bf9e-a56b-bd73-3c1d0994a064@schaufler-ca.com> In-Reply-To: From: Bruce Fields Date: Tue, 14 Sep 2021 09:59:19 -0400 Message-ID: Subject: Re: [PATCH v3 0/1] Relax restrictions on user.* xattr To: Vivek Goyal Cc: Casey Schaufler , "Dr. David Alan Gilbert" , Alexander Viro , linux-fsdevel , LKML , virtio-fs@redhat.com, Daniel Walsh , Christian Brauner , Casey Schaufler , LSM , selinux@vger.kernel.org, "Theodore Ts'o" , Miklos Szeredi , Giuseppe Scrivano , stephen.smalley.work@gmail.com, Andreas Gruenbacher , Dave Chinner Content-Type: text/plain; charset="UTF-8" Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Tue, Sep 14, 2021 at 8:52 AM Vivek Goyal wrote: > Same is the requirement for regular containers and that's why > podman (and possibly other container managers), make top level > storage directory only readable and searchable by root, so that > unpriveleged entities on host can not access container root filesystem > data. Note--if that directory is on NFS, making it readable and searchable by root is very weak protection, since it's often possible for an attacker to guess filehandles and access objects without the need for directory lookups. --b.