Re: [PATCH] fs: add an ioctl to get an owning userns for a superblock

2017-05-10 Thread Eric W. Biederman
Andrei Vagin writes: > On Tue, May 09, 2017 at 07:34:00PM -0500, Eric W. Biederman wrote: >> Andrei Vagin writes: >> >> > The introduced ioctl returns a file descriptor that refers to a owning >> > user namespace for a superblock which is associated with a target file >> > descriptor. >> > >> >

Re: [PATCH] fs: add an ioctl to get an owning userns for a superblock

2017-05-10 Thread Andrei Vagin
On Tue, May 09, 2017 at 07:34:00PM -0500, Eric W. Biederman wrote: > Andrei Vagin writes: > > > The introduced ioctl returns a file descriptor that refers to a owning > > user namespace for a superblock which is associated with a target file > > descriptor. > > > > EPERM is returned if the curren

Re: [PATCH] fs: add an ioctl to get an owning userns for a superblock

2017-05-09 Thread Eric W. Biederman
Andrei Vagin writes: > The introduced ioctl returns a file descriptor that refers to a owning > user namespace for a superblock which is associated with a target file > descriptor. > > EPERM is returned if the current process doesn't have CAP_SYS_ADMIN in > the returned user namespace. > > This i

[PATCH] fs: add an ioctl to get an owning userns for a superblock

2017-05-09 Thread Andrei Vagin
The introduced ioctl returns a file descriptor that refers to a owning user namespace for a superblock which is associated with a target file descriptor. EPERM is returned if the current process doesn't have CAP_SYS_ADMIN in the returned user namespace. This information is required to dump and re