Re: [PATCH v3 2/4] vfs,userns: Ensure real root is always capable towards inodes

2014-09-12 Thread Serge Hallyn
Quoting Seth Forshee (seth.fors...@canonical.com): > Currently root is restricted from performing some modifications > to inodes whose owner is INVALID_UID or group is INVALID_GID > because this id doesn't map into any user namespace. Add a > special case to the relevant checks to make sure root is

[PATCH v3 2/4] vfs,userns: Ensure real root is always capable towards inodes

2014-09-12 Thread Seth Forshee
Currently root is restricted from performing some modifications to inodes whose owner is INVALID_UID or group is INVALID_GID because this id doesn't map into any user namespace. Add a special case to the relevant checks to make sure root is always capable of performing these operations. Signed-off