[PATCH v2] ovl: drop CAP_SYS_RESOURCE from saved mounter's credentials

2017-01-10 Thread Konstantin Khlebnikov
If overlay was mounted by root then quota set for upper layer does not work because overlay now always use mounter's credentials for operations. Also overlay might deplete reserved space and inodes in ext4. This patch drops capability SYS_RESOURCE from saved credentials. This affects creation new

Re: [PATCH v2] ovl: drop CAP_SYS_RESOURCE from saved mounter's credentials

2017-07-22 Thread Amir Goldstein
Bumped into this patch (Now upstream commit 51f8f3c4e225) and realized it is missing cc: stable # v4.8 At least this docker PR suggests that regression introduced in v4.8 will not be appreciated down the road: https://github.com/moby/moby/issues/29364 On Tue, Jan 10, 2017 at 9:17 PM, Vivek Goyal

Re: [PATCH v2] ovl: drop CAP_SYS_RESOURCE from saved mounter's credentials

2017-07-24 Thread Miklos Szeredi
On Sat, Jul 22, 2017 at 11:30 AM, Amir Goldstein wrote: > Bumped into this patch (Now upstream commit 51f8f3c4e225) and realized > it is missing cc: stable # v4.8 > > At least this docker PR suggests that regression introduced in v4.8 will not > be > appreciated down the road: > https://github.co

Re: [PATCH v2] ovl: drop CAP_SYS_RESOURCE from saved mounter's credentials

2017-07-24 Thread Miklos Szeredi
On Tue, Jan 10, 2017 at 8:17 PM, Vivek Goyal wrote: > On Tue, Jan 10, 2017 at 09:30:21PM +0300, Konstantin Khlebnikov wrote: >> If overlay was mounted by root then quota set for upper layer does not work >> because overlay now always use mounter's credentials for operations. >> Also overlay might

Re: [PATCH v2] ovl: drop CAP_SYS_RESOURCE from saved mounter's credentials

2017-07-24 Thread Greg KH
On Mon, Jul 24, 2017 at 10:15:22AM +0200, Miklos Szeredi wrote: > On Sat, Jul 22, 2017 at 11:30 AM, Amir Goldstein wrote: > > Bumped into this patch (Now upstream commit 51f8f3c4e225) and realized > > it is missing cc: stable # v4.8 > > > > At least this docker PR suggests that regression introduc

Re: [PATCH v2] ovl: drop CAP_SYS_RESOURCE from saved mounter's credentials

2017-01-10 Thread Vivek Goyal
On Tue, Jan 10, 2017 at 09:30:21PM +0300, Konstantin Khlebnikov wrote: > If overlay was mounted by root then quota set for upper layer does not work > because overlay now always use mounter's credentials for operations. > Also overlay might deplete reserved space and inodes in ext4. > > This patch