[PATCH RESEND v5 2/5] namei: O_BENEATH-style path resolution flags

2019-03-20 Thread Aleksa Sarai
Add the following flags to allow various restrictions on path resolution (these affect the *entire* resolution, rather than just the final path component -- as is the case with most other AT_* flags). The primary justification for these flags is to allow for programs to be far more strict about ho

Re: [PATCH RESEND v5 2/5] namei: O_BENEATH-style path resolution flags

2019-03-10 Thread Aleksa Sarai
On 2019-03-09, Linus Torvalds wrote: > On Sat, Mar 9, 2019 at 9:26 AM Christian Brauner wrote: > > Aside from that I want to point out that it is non-trivial to do this in > > user space. > > Oh, absolutely agreed. It's easy to do it in the kernel, and doing it > anywhere else ends up having hor

Re: [PATCH RESEND v5 2/5] namei: O_BENEATH-style path resolution flags

2019-03-09 Thread Linus Torvalds
On Sat, Mar 9, 2019 at 9:26 AM Christian Brauner wrote: > > Aside from that I want to point out that it is non-trivial to do this in > user space. Oh, absolutely agreed. It's easy to do it in the kernel, and doing it anywhere else ends up having horrible races that the kernel has to deal with and

Re: [PATCH RESEND v5 2/5] namei: O_BENEATH-style path resolution flags

2019-03-09 Thread Christian Brauner
On Sat, Mar 09, 2019 at 09:00:58AM -0800, Linus Torvalds wrote: > On Wed, Mar 6, 2019 at 11:14 AM Aleksa Sarai wrote: > > > > This is a refresh of Al's AT_NO_JUMPS patchset[1] (which was a variation > > on David Drysdale's O_BENEATH patchset[2], which in turn was based on > > the Capsicum project[

Re: [PATCH RESEND v5 2/5] namei: O_BENEATH-style path resolution flags

2019-03-09 Thread Linus Torvalds
On Wed, Mar 6, 2019 at 11:14 AM Aleksa Sarai wrote: > > This is a refresh of Al's AT_NO_JUMPS patchset[1] (which was a variation > on David Drysdale's O_BENEATH patchset[2], which in turn was based on > the Capsicum project[3]). Input from Linus and Andy in the AT_NO_JUMPS > thread[4] determined m

[PATCH RESEND v5 2/5] namei: O_BENEATH-style path resolution flags

2019-03-06 Thread Aleksa Sarai
Add the following flags to allow various restrictions on path resolution (these affect the *entire* resolution, rather than just the final path component -- as is the case with most other AT_* flags). The primary justification for these flags is to allow for programs to be far more strict about ho