On Fri, Oct 02, 2015 at 01:07:00AM +0200, Jan Kara wrote: > On Thu 01-10-15 10:55:50, Eric W. Biederman wrote: > > The goal if possible is to run things like docker without needed to be > > root or even more fun to run docker in a container, and in general > > enable nested containers. > > Frankly at the filesystem side we are rather far from being able to safely > mount untrusted device and I don't think we'll ever be robust enough to > tolerate e.g. user changing the disk while fs is using it. So would this be > FUSE-only thing or is someone still hoping that general purpose filesystems > will be robust enough in future?
FUSE will almost certainly be first. I've also been working with ext4, and I would like to see that eventually supported to some degree. Seth -- To unsubscribe from this list: send the line "unsubscribe linux-security-module" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
