OpenVZ Forum: Devel » [patch 0/8] mount ownership and unprivileged mount syscall (v4)

Home » Mailing lists » Devel » [patch 0/8] mount ownership and unprivileged mount syscall (v4)

Show: Today's Messages :: Show Polls :: Message Navigator
E-mail to friend

Re: [patch 8/8] allow unprivileged fuse mounts [message #18438 is a reply to message #18423]

Sat, 21 April 2007 08:16

Miklos Szeredi
Messages: 161
Registered: April 2007

Senior Member

> > Use FS_SAFE for "fuse" fs type, but not for "fuseblk".
> > 
> > FUSE was designed from the beginning to be safe for unprivileged
> > users.  This has also been verified in practice over many years.
> 
> How does FUSE do this?
> 
> There are obvious cases like crafting a filesystem which has setuid executables
> or world-writeable device nodes or whatever.  I'm sure there are lots of other
> cases.
> 
> Where is FUSE's implementation of all this protection described?

Most of it is in Documentation/filesystems/fuse.txt, some of it is
code comments.

Miklos
_______________________________________________
Containers mailing list
Containers@lists.linux-foundation.org
https://lists.linux-foundation.org/mailman/listinfo/containers

Report message to a moderator

[Message index]

		[patch 0/8] mount ownership and unprivileged mount syscall (v4) By: Miklos Szeredi on Fri, 20 April 2007 10:25
		[patch 1/8] add user mounts to the kernel By: Miklos Szeredi on Fri, 20 April 2007 10:25
		Re: [patch 1/8] add user mounts to the kernel By: akpm on Sat, 21 April 2007 07:55
		Re: [patch 1/8] add user mounts to the kernel By: Miklos Szeredi on Sat, 21 April 2007 08:06
		Re: [patch 1/8] add user mounts to the kernel By: ebiederm on Sat, 21 April 2007 13:14
		Re: [patch 1/8] add user mounts to the kernel By: Miklos Szeredi on Sun, 22 April 2007 07:02
		Re: [patch 1/8] add user mounts to the kernel By: ebiederm on Sun, 22 April 2007 07:43
		Re: [patch 1/8] add user mounts to the kernel By: Miklos Szeredi on Sun, 22 April 2007 08:05
		Re: [patch 1/8] add user mounts to the kernel By: Miklos Szeredi on Sun, 22 April 2007 16:22
		[patch 2/8] allow unprivileged umount By: Miklos Szeredi on Fri, 20 April 2007 10:25
		Re: [patch 2/8] allow unprivileged umount By: akpm on Sat, 21 April 2007 07:55
		Re: [patch 2/8] allow unprivileged umount By: hpa on Sat, 21 April 2007 08:01
		Re: [patch 2/8] allow unprivileged umount By: Miklos Szeredi on Sat, 21 April 2007 08:09
		Re: [patch 2/8] allow unprivileged umount By: akpm on Sat, 21 April 2007 08:36
		Re: [patch 2/8] allow unprivileged umount By: ebiederm on Sat, 21 April 2007 12:53
		Re: [patch 2/8] allow unprivileged umount By: Miklos Szeredi on Sun, 22 April 2007 06:47
		Re: [patch 2/8] allow unprivileged umount By: ebiederm on Sat, 21 April 2007 13:29
		Re: [patch 2/8] allow unprivileged umount By: Miklos Szeredi on Sun, 22 April 2007 07:05
		Re: [patch 2/8] allow unprivileged umount By: ebiederm on Sun, 22 April 2007 07:09
		Re: [patch 2/8] allow unprivileged umount By: Miklos Szeredi on Sun, 22 April 2007 07:32
		[patch 3/8] account user mounts By: Miklos Szeredi on Fri, 20 April 2007 10:25
		Re: [patch 3/8] account user mounts By: akpm on Sat, 21 April 2007 07:55
		Re: [patch 3/8] account user mounts By: ebiederm on Sat, 21 April 2007 13:37
		Re: [patch 3/8] account user mounts By: Miklos Szeredi on Sun, 22 April 2007 07:10
		Re: [patch 3/8] account user mounts By: ebiederm on Sun, 22 April 2007 07:49
		Re: [patch 3/8] account user mounts By: Miklos Szeredi on Sun, 22 April 2007 08:08
		[patch 4/8] propagate error values from clone_mnt By: Miklos Szeredi on Fri, 20 April 2007 10:25
		Re: [patch 4/8] propagate error values from clone_mnt By: ebiederm on Sat, 21 April 2007 13:40
		[patch 5/8] allow unprivileged bind mounts By: Miklos Szeredi on Fri, 20 April 2007 10:25
		Re: [patch 5/8] allow unprivileged bind mounts By: ebiederm on Sat, 21 April 2007 14:00
		Re: [patch 5/8] allow unprivileged bind mounts By: Miklos Szeredi on Sun, 22 April 2007 07:19
		[patch 6/8] put declaration of put_filesystem() in fs.h By: Miklos Szeredi on Fri, 20 April 2007 10:25
		[patch 7/8] allow unprivileged mounts By: Miklos Szeredi on Fri, 20 April 2007 10:25
		Re: [patch 7/8] allow unprivileged mounts By: akpm on Sat, 21 April 2007 07:55
		Re: [patch 7/8] allow unprivileged mounts By: ebiederm on Sat, 21 April 2007 14:10
		Re: [patch 7/8] allow unprivileged mounts By: Jan Engelhardt on Sat, 21 April 2007 15:43
		Re: [patch 7/8] allow unprivileged mounts By: Miklos Szeredi on Sat, 21 April 2007 08:13
		Re: [patch 7/8] allow unprivileged mounts By: Miklos Szeredi on Sat, 21 April 2007 08:23
		Re: [patch 7/8] allow unprivileged mounts By: Shaya Potter on Sun, 22 April 2007 00:46
		Re: [patch 7/8] allow unprivileged mounts By: Andi Kleen on Sat, 21 April 2007 22:06
		Re: [patch 7/8] allow unprivileged mounts By: ebiederm on Sat, 21 April 2007 16:57
		Re: [patch 7/8] allow unprivileged mounts By: Jan Engelhardt on Sat, 21 April 2007 17:10
		Re: [patch 7/8] allow unprivileged mounts By: ebiederm on Sat, 21 April 2007 21:00
		Re: [patch 7/8] allow unprivileged mounts By: Miklos Szeredi on Sun, 22 April 2007 08:19
		Re: [patch 7/8] allow unprivileged mounts By: ebiederm on Sat, 21 April 2007 21:33
		[patch 8/8] allow unprivileged fuse mounts By: Miklos Szeredi on Fri, 20 April 2007 10:25
		Re: [patch 8/8] allow unprivileged fuse mounts By: akpm on Sat, 21 April 2007 07:55
		Re: [patch 8/8] allow unprivileged fuse mounts By: Miklos Szeredi on Sat, 21 April 2007 08:16
		Re: [patch 8/8] allow unprivileged fuse mounts By: ebiederm on Sat, 21 April 2007 14:18
		Re: [patch 8/8] allow unprivileged fuse mounts By: Miklos Szeredi on Sun, 22 April 2007 07:22
		Re: [patch 0/8] mount ownership and unprivileged mount syscall (v4) By: ebiederm on Wed, 25 April 2007 01:04
		Re: [patch 0/8] mount ownership and unprivileged mount syscall (v4) By: Karel Zak on Wed, 25 April 2007 00:04
		Re: [patch 0/8] mount ownership and unprivileged mount syscall (v4) By: Miklos Szeredi on Wed, 25 April 2007 07:18
		Re: [patch 0/8] mount ownership and unprivileged mount syscall (v4) By: Karel Zak on Wed, 25 April 2007 09:23

Previous Topic:	[PATCH] cfq: get rid of cfqq hash
Next Topic:	[PATCH] cfq: get rid of cfqq hash

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

] [

]

Current Time: Wed Aug 14 22:46:20 GMT 2024

Total time taken to generate the page: 0.02749 seconds