Re: [Devel] [PATCH rh7] fuse: allow to mount fuse filesystems inside CT

2015-11-11 Thread Stanislav Kinsburskiy
11.11.2015 15:40, Konstantin Khorenko пишет: On 11/10/2015 05:56 PM, Andrey Ryabinin wrote: On 11/10/2015 05:52 PM, Stanislav Kinsburskiy wrote: goto err; +if (get_exec_env()->init_cred) +root_user_ns = get_exec_env()->init_cred->user_ns; +else +root_user_ns

Re: [Devel] [PATCH rh7] fuse: allow to mount fuse filesystems inside CT

2015-11-11 Thread Konstantin Khorenko
On 11/10/2015 05:56 PM, Andrey Ryabinin wrote: On 11/10/2015 05:52 PM, Stanislav Kinsburskiy wrote: goto err; +if (get_exec_env()->init_cred) +root_user_ns = get_exec_env()->init_cred->user_ns; +else +root_user_ns = &init_user_ns; + We have some helper for th

Re: [Devel] [PATCH rh7] fuse: allow to mount fuse filesystems inside CT

2015-11-10 Thread Andrey Ryabinin
On 11/10/2015 05:52 PM, Stanislav Kinsburskiy wrote: >> goto err; >> +if (get_exec_env()->init_cred) >> +root_user_ns = get_exec_env()->init_cred->user_ns; >> +else >> +root_user_ns = &init_user_ns; >> + > > We have some helper for this, if I'm not mistaken. > Pro

Re: [Devel] [PATCH rh7] fuse: allow to mount fuse filesystems inside CT

2015-11-10 Thread Stanislav Kinsburskiy
10.11.2015 15:30, Andrey Ryabinin пишет: Currently mounting fuse fs inside CT fails because we don't pass (file->f_cred->user_ns != &init_user_ns) check. Test file's namespace against VE's init_cred->user_ns instead. This allows to use fuse inside containers. https://jira.sw.ru/browse/PSBM-410

[Devel] [PATCH rh7] fuse: allow to mount fuse filesystems inside CT

2015-11-10 Thread Andrey Ryabinin
Currently mounting fuse fs inside CT fails because we don't pass (file->f_cred->user_ns != &init_user_ns) check. Test file's namespace against VE's init_cred->user_ns instead. This allows to use fuse inside containers. https://jira.sw.ru/browse/PSBM-41075 Signed-off-by: Andrey Ryabinin --- fs/f