Received: by 2002:a05:6a10:2785:0:0:0:0 with SMTP id ia5csp175273pxb; Wed, 13 Jan 2021 00:15:39 -0800 (PST) X-Google-Smtp-Source: ABdhPJzOEiL+L1smAYVfTBbLQcjgLby9T5v/QIgdCQEF+yDcgU9xJJvI1B9ZwjaVmFD3fw9NjDHA X-Received: by 2002:a17:906:3111:: with SMTP id 17mr691326ejx.152.1610525739199; Wed, 13 Jan 2021 00:15:39 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1610525739; cv=none; d=google.com; s=arc-20160816; b=xcgKwHnLjThWjYP3Yn5eYwVltapeLWZpTN8BeE/ft9DssuO5+ohFXWN5OK1fdLGnJI EAbwp2uO/DIuNlRzMG+8INJ6KsrLf86WgkDIR4tVdycTIxZ3P9UnVCb+p6rYa+1LaEZw NsscEMDys1ECQOCVmaxGf32u3hEg3+UWaaTiWqBBAE84sPn/WsgLyPD6k6r6uICfFJkJ U24byxFToygA+BzmqG4pv/o+pRQhyrdQUWDO8jXay2BfAQCDmJu4B5skqw9846ZM6qPZ hvSM336rGALzrGZIlQgYIaVkfzehacS2Dd9r6UmyvWCC/P//8nfzUy2IKEcTxRA+ADyH O5uQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:in-reply-to:content-disposition:mime-version :references:message-id:subject:cc:to:from:date:dkim-signature; bh=gGDAxpRzDfTRkcbZGlaFNZEk3KKCV1HZKce10YnZBmg=; b=Q+0vgft+QUiYEMi5D4977+vODRDkyzC/uwyZbBMb/wUVP5mbPh6c0Q9w2+tKoNWQ8Q s/3ue5J1h3CbCFXI7fYREnq/eOTQtC150IXzhpqqXKZmTewmC1b0KhaFNjc4sMy0g1Qi 7OGikxKtJu32uNG+/+RGy1QH8WPsFrfC5e0r+QWidc6N9wskGA0PBhD9yVH0onfmIZlU liEMCtAol8imO9qaus2Tau9Iam0PdD5J732l/pdBIOGgO7OwXYfY3jcjSZn+Mv4ReAHz YAm4IGdZZlleC3Gk12ZfMRn68YVWdHRKSamPLGGKRnoZg5ZjBOIX2e6VEkV1qZGFKTmR xCzA== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@infradead.org header.s=casper.20170209 header.b=VoiXeG9I; spf=pass (google.com: domain of linux-nfs-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-nfs-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id bz23si563676ejc.600.2021.01.13.00.15.12; Wed, 13 Jan 2021 00:15:39 -0800 (PST) Received-SPF: pass (google.com: domain of linux-nfs-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@infradead.org header.s=casper.20170209 header.b=VoiXeG9I; spf=pass (google.com: domain of linux-nfs-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-nfs-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726809AbhAMIPA (ORCPT + 99 others); Wed, 13 Jan 2021 03:15:00 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:41088 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726799AbhAMIPA (ORCPT ); Wed, 13 Jan 2021 03:15:00 -0500 Received: from casper.infradead.org (casper.infradead.org [IPv6:2001:8b0:10b:1236::1]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 1143EC061786 for ; Wed, 13 Jan 2021 00:14:20 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=infradead.org; s=casper.20170209; h=In-Reply-To:Content-Type:MIME-Version: References:Message-ID:Subject:Cc:To:From:Date:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description; bh=gGDAxpRzDfTRkcbZGlaFNZEk3KKCV1HZKce10YnZBmg=; b=VoiXeG9Ix3ixAVkOCp31gYMPkJ jnYrjllWSoK2YQg/fkg1yIHvq4gJyHEnWQc2DXnUwqnDWx8PV6wjYMdqSR2LNpZyPxMiPVrPZJrpt Za7EKE+UQFbCbWDQ+ME/pnpNVD79bXOO9z4QqOTFbyU8wcIb5pSqYvltUbmgGvtbasWgQHJ8WVJG+ gDlRu113P+0VEqYvj/e0NEKN9O1q5QsIdHfQW4qkp0I8ns810fwrCwTX3zknAReDfvxxo7GftWbdm jS4PpJ7/0UMeEZEc7BPoNVSZnOA14vVkww+Xh11Af6dqNbVXECCFnnOyC3s+CNyQtxEYGAbCUt/+T kDa97oAQ==; Received: from hch by casper.infradead.org with local (Exim 4.94 #2 (Red Hat Linux)) id 1kzbGg-00601Q-31; Wed, 13 Jan 2021 08:12:50 +0000 Date: Wed, 13 Jan 2021 08:12:38 +0000 From: Christoph Hellwig To: "bfields@fieldses.org" Cc: Patrick Goetz , Trond Myklebust , "wangzhibei1999@gmail.com" , "security@kernel.org" , "w@1wt.eu" , "greg@kroah.com" , "linux-nfs@vger.kernel.org" , "chuck.lever@oracle.com" Subject: Re: nfsd vurlerability submit Message-ID: <20210113081238.GA1428651@infradead.org> References: <20210108152607.GA950@1wt.eu> <20210108153237.GB4183@fieldses.org> <20210108154230.GB950@1wt.eu> <20210111193655.GC2600@fieldses.org> <20210112153208.GF9248@fieldses.org> <8296b696a7fa5591ad3fbb05bfcf6bdf6175cc38.camel@hammerspace.com> <42fcbc42-f1b3-5d99-c507-e1b579f5a37a@math.utexas.edu> <20210112180326.GI9248@fieldses.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20210112180326.GI9248@fieldses.org> X-SRS-Rewrite: SMTP reverse-path rewritten from by casper.infradead.org. See http://www.infradead.org/rpr.html Precedence: bulk List-ID: X-Mailing-List: linux-nfs@vger.kernel.org FYI, if people really want to use some sort of subtree exports, for XFS (and probably ext4) we encode the project id into the file handle and use the hierarchical project ID inheritance that we already use for project quotas.