Received: by 2002:a05:6500:1b8f:b0:1fa:5c73:8e2d with SMTP id df15csp442415lqb; Tue, 28 May 2024 23:24:26 -0700 (PDT) X-Forwarded-Encrypted: i=3; AJvYcCWrhMyRmCUJzYhfLUjuyv2Ml6gh58YQelQwIOBdnIFQSR0EGrREa85FEtHmdCIBq8iamnFihZdiioldOnF2O5aRT88qYld2pGpl5UL9TQ== X-Google-Smtp-Source: AGHT+IFzuOLdbXRfjohqenueW6VztxkH01CibWQIuAi+zUi0PtdgSaEF91ZdeBKHZd34ik8B+X9N X-Received: by 2002:a05:6512:4885:b0:52a:fa87:748e with SMTP id 2adb3069b0e04-52afa8774ffmr456836e87.56.1716963866643; Tue, 28 May 2024 23:24:26 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1716963866; cv=pass; d=google.com; s=arc-20160816; b=U88/RcXnsDLDzkcshTUqPm23aRZmCXQN1wRgHWb7PiaEkZ5wljuuzLBRqYjABv6TsI S9FKWV+cKkYydGGGAS6csNdvJ2yjavQjvsusEQz7tSl4hEKS0d628vcrqUPc+dGZDsuq zM0IsrirFjyG5B3Gmh+Do+YxLEAO+NmTNXfMYDcCSDQiVo/Rz5ZFXnQMHBFuq1Nmy733 Ebq+SWAXc7nF6eOtKQ/+J3rXfLfGH2XvTIrjYjO/8pNm1kB2S44cn46szxVjAL1aZ1jK zQbHHFvSB3z096WHCL++7II0xfbaFJHQqy+WMpXsiKbqeclvVhRz2U4ebnlkPCnuM2e1 JEQQ== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=in-reply-to:content-disposition:mime-version:list-unsubscribe :list-subscribe:list-id:precedence:references:message-id:subject:cc :to:from:date:dkim-signature; bh=pPM9ny+kNaumhJIGu8VXl7ieb63WgdrNQQ2r3r86KrU=; fh=6WHjibcWYMR0H/ii9XpnwFNFFgMIffKU7Xp4j0GPeN0=; b=spF0POfPR+sasceus7Nz+v/Cgp6FOBgAhgR0kv39lDPDy8w69UzswAcXCMXCSQ+Y1p I5B8ApwfX8TDBc8gJAWTNqSyqHNHkXGHxFBL9m6k1yCQYwMsCoRdq/UiPRVFqv8zPknC nsvtBW02CWtJDqQ0TM1tJGze9K/Pq2UDQfV+oMbwJmn+p9tTdBK+R3XK5qf7umQJfDat HKwfJudYDu4UIqiReC3RAyl9on0Yn+fywH0L9Wf6cOrteaSCfjlrHNM6de/McFO4IbM3 U8M56lhXVR6RYDjLvQmzkTa/s2UU1dhOS4hYZzZc9yLDKEEbVQpej6ePpdvgaGPShwcg 05eg==; dara=google.com ARC-Authentication-Results: i=2; mx.google.com; dkim=pass header.i=@infradead.org header.s=bombadil.20210309 header.b=0xSCbsz6; arc=pass (i=1 dkim=pass dkdomain=infradead.org); spf=pass (google.com: domain of linux-nfs+bounces-3460-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:4601:e00::3 as permitted sender) smtp.mailfrom="linux-nfs+bounces-3460-linux.lists.archive=gmail.com@vger.kernel.org" Return-Path: Received: from am.mirrors.kernel.org (am.mirrors.kernel.org. [2604:1380:4601:e00::3]) by mx.google.com with ESMTPS id a640c23a62f3a-a626cc37808si570561466b.308.2024.05.28.23.24.26 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 28 May 2024 23:24:26 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-nfs+bounces-3460-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:4601:e00::3 as permitted sender) client-ip=2604:1380:4601:e00::3; Authentication-Results: mx.google.com; dkim=pass header.i=@infradead.org header.s=bombadil.20210309 header.b=0xSCbsz6; arc=pass (i=1 dkim=pass dkdomain=infradead.org); spf=pass (google.com: domain of linux-nfs+bounces-3460-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:4601:e00::3 as permitted sender) smtp.mailfrom="linux-nfs+bounces-3460-linux.lists.archive=gmail.com@vger.kernel.org" Received: from smtp.subspace.kernel.org (wormhole.subspace.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by am.mirrors.kernel.org (Postfix) with ESMTPS id 5D0481F2314C for ; Wed, 29 May 2024 06:24:26 +0000 (UTC) Received: from localhost.localdomain (localhost.localdomain [127.0.0.1]) by smtp.subspace.kernel.org (Postfix) with ESMTP id 66E8A15EFC7; Wed, 29 May 2024 06:24:22 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=infradead.org header.i=@infradead.org header.b="0xSCbsz6" X-Original-To: linux-nfs@vger.kernel.org Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id E54E315F3F3; Wed, 29 May 2024 06:24:20 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=198.137.202.133 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1716963862; cv=none; b=hVCzmQc8piphhmG4VHAjczv3DE9J4VNzQEvv9+rBU1nE6JuSA4IJWsBJ4nYzCTbk7FX8Y3Ftf6NKLJVL6IbhKIJ/g1OHHQT4o8cXGO99nyiw48rAJg/DS07KO+unEd9hXxvKT849B0jG03UxapNIfIznReknpaBxGDCUi+31uiM= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1716963862; c=relaxed/simple; bh=pPM9ny+kNaumhJIGu8VXl7ieb63WgdrNQQ2r3r86KrU=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=DdX1Mj5XTaavgOOPFoMOGPw81qR9hNb2GMN+BGc5WsTeJqZ9fDIY2TxvuqYSsPikSLeE/pagbKcrAGyBYRt+TBRUsH75W3ijhUG/vCYfTiTcB3bc+R06kM8Um76QToW0YQmslJpg3kupXC9fDi5gjdhd5bj1/R01p1HFNB95zAA= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=infradead.org; spf=none smtp.mailfrom=bombadil.srs.infradead.org; dkim=pass (2048-bit key) header.d=infradead.org header.i=@infradead.org header.b=0xSCbsz6; arc=none smtp.client-ip=198.137.202.133 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=infradead.org Authentication-Results: smtp.subspace.kernel.org; spf=none smtp.mailfrom=bombadil.srs.infradead.org DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=infradead.org; s=bombadil.20210309; h=In-Reply-To:Content-Type:MIME-Version :References:Message-ID:Subject:Cc:To:From:Date:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description; bh=pPM9ny+kNaumhJIGu8VXl7ieb63WgdrNQQ2r3r86KrU=; b=0xSCbsz68/CidLV/kgNWdm4vmd DcnHmjJHBjSaNDwa/7FUP0m+3soqGA6wk+873Rz5SWPyQWnEI7EN29rP3kiCiGHApMqCzQX/seZvu CXlg1l52hShvokbOux46Z1WneHxAEN3EIkXY7xwtt7smMWt9uFUz8ce/yF09LPAuQomDg1MqWJPrY Noom52EDsVmhX/jDbfsU2tYaP3iV2+Xs11XVxaEv1MSI83BkG0Tog5UknTKEsvRVq4oiYSSfjPdWO x3/Pc+ifQSc/kuzL5jEBbm+66V2MPFr0NeZumYqgKKijtP3hGo6XGtPZGdZLa4Zh3k9XAetf8yHuF Nnlq5K3Q==; Received: from hch by bombadil.infradead.org with local (Exim 4.97.1 #2 (Red Hat Linux)) id 1sCCjS-00000002zuE-2aAy; Wed, 29 May 2024 06:24:18 +0000 Date: Tue, 28 May 2024 23:24:18 -0700 From: "hch@infradead.org" To: Dave Chinner Cc: "hch@infradead.org" , Jan Kara , Trond Myklebust , "chuck.lever@oracle.com" , "linux-api@vger.kernel.org" , "linux-fsdevel@vger.kernel.org" , "brauner@kernel.org" , "linux-kernel@vger.kernel.org" , "alex.aring@gmail.com" , "cyphar@cyphar.com" , "viro@zeniv.linux.org.uk" , "jlayton@kernel.org" , "amir73il@gmail.com" , "linux-nfs@vger.kernel.org" Subject: Re: [PATCH RFC v2] fhandle: expose u64 mount id to name_to_handle_at(2) Message-ID: References: <20240523-exportfs-u64-mount-id-v2-1-f9f959f17eb1@cyphar.com> <30137c868039a3ae17f4ae74d07383099bfa4db8.camel@hammerspace.com> <86065f6a4f3d2f3d78f39e7a276a2d6e25bfbc9d.camel@hammerspace.com> <20240528101152.kyvtx623djnxwonm@quack3> Precedence: bulk X-Mailing-List: linux-nfs@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-SRS-Rewrite: SMTP reverse-path rewritten from by bombadil.infradead.org. See http://www.infradead.org/rpr.html On Wed, May 29, 2024 at 09:25:49AM +1000, Dave Chinner wrote: > But no-one has bothered to reply or acknowledge my comments so I'll > point them out again and repeat: Filehandles generated by > the kernel for unprivileged use *must* be self describing and self > validating as the kernel must be able to detect and prevent > unprivelged users from generating custom filehandles that can be > used to access files outside the restricted scope of their > container. We must not generate file handle for unprivileged use at all, as they bypass all the path based access controls.