Re: [PATCH v2 3/3] fuse: Add support for mounts from user namespaces

2014-09-05 Thread Serge Hallyn
Quoting Seth Forshee (seth.fors...@canonical.com): > On Fri, Sep 05, 2014 at 04:48:11PM +, Serge Hallyn wrote: > > Quoting Seth Forshee (seth.fors...@canonical.com): > > > Update fuse to support mounts from within user namespaces. This > > > is mostly a matter of translating uids and gids into

Re: [PATCH v2 3/3] fuse: Add support for mounts from user namespaces

2014-09-05 Thread Seth Forshee
On Fri, Sep 05, 2014 at 04:48:11PM +, Serge Hallyn wrote: > Quoting Seth Forshee (seth.fors...@canonical.com): > > Update fuse to support mounts from within user namespaces. This > > is mostly a matter of translating uids and gids into the > > namespace of the process reading requests before ha

Re: [PATCH v2 3/3] fuse: Add support for mounts from user namespaces

2014-09-05 Thread Serge Hallyn
Quoting Seth Forshee (seth.fors...@canonical.com): > Update fuse to support mounts from within user namespaces. This > is mostly a matter of translating uids and gids into the > namespace of the process reading requests before handing the > requests off to userspace. > > Due to security concerns t

[PATCH v2 3/3] fuse: Add support for mounts from user namespaces

2014-09-02 Thread Seth Forshee
Update fuse to support mounts from within user namespaces. This is mostly a matter of translating uids and gids into the namespace of the process reading requests before handing the requests off to userspace. Due to security concerns the namespace used should be fixed, otherwise a user might be ab