Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-23 Thread Seth Forshee
On Thu, Oct 23, 2014 at 11:32:41AM -0700, Andy Lutomirski wrote: > On Oct 21, 2014 9:59 PM, "Seth Forshee" wrote: > > > > On Tue, Oct 21, 2014 at 02:27:13PM -0700, Andy Lutomirski wrote: > > > On Tue, Oct 21, 2014 at 2:21 PM, Seth Forshee > > > > > > > return s; > > > > > > > > fail: > >

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-23 Thread Andy Lutomirski
On Oct 21, 2014 9:59 PM, "Seth Forshee" wrote: > > On Tue, Oct 21, 2014 at 02:27:13PM -0700, Andy Lutomirski wrote: > > On Tue, Oct 21, 2014 at 2:21 PM, Seth Forshee > > > > > return s; > > > > > > fail: > > > diff --git a/fs/xattr.c b/fs/xattr.c > > > index 64e83efb742d..383bb9f2

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-23 Thread Andy Lutomirski
On Oct 21, 2014 9:59 PM, Seth Forshee seth.fors...@canonical.com wrote: On Tue, Oct 21, 2014 at 02:27:13PM -0700, Andy Lutomirski wrote: On Tue, Oct 21, 2014 at 2:21 PM, Seth Forshee return s; fail: diff --git a/fs/xattr.c b/fs/xattr.c index 64e83efb742d..383bb9f2

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-23 Thread Seth Forshee
On Thu, Oct 23, 2014 at 11:32:41AM -0700, Andy Lutomirski wrote: On Oct 21, 2014 9:59 PM, Seth Forshee seth.fors...@canonical.com wrote: On Tue, Oct 21, 2014 at 02:27:13PM -0700, Andy Lutomirski wrote: On Tue, Oct 21, 2014 at 2:21 PM, Seth Forshee return s; fail:

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-21 Thread Seth Forshee
;> >> >>> > > >> >> >>> >> From: Seth Forshee > >> >> >>> >> To: Miklos Szeredi > >> >> >>> >> Cc: fuse-de...@lists.sourceforge.net, "Serge H. Hallyn" > >> >> >>>

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-21 Thread Andy Lutomirski
On Tue, Oct 21, 2014 at 2:34 PM, Michael j Theall wrote: > Andy Lutomirski wrote on 10/21/2014 04:27:13 PM: >> But how does this help with FUSE at all? Does FUSE end up calling >> xattr_permission? >> >> --Andy >> > > The xattr system calls go through xattr_permission before it ever gets to >

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-21 Thread Michael j Theall
l.org" ker...@vger.kernel.org>, Miklos Szeredi , "Serge > H. Hallyn" > Date: 10/21/2014 04:27 PM > Subject: Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged > xattrs only with a mount option > > On Tue, Oct 21, 2014 at 2:21 PM, Seth Forshee > wrote

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-21 Thread Andy Lutomirski
o: Miklos Szeredi >> >> >>> >> Cc: fuse-de...@lists.sourceforge.net, "Serge H. Hallyn" >> >> >>> >> , linux-kernel@vger.kernel.org, Seth >> >> >>> >> Forshee , "Eric W. Biederman" >> >&

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-21 Thread Seth Forshee
14 > >> >>> > 09:25:55 AM: > >> >>> > > >> >>> >> From: Seth Forshee > >> >>> >> To: Miklos Szeredi > >> >>> >> Cc: fuse-de...@lists.sourceforge.net, "Serge H. Hallyn" >

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-21 Thread Seth Forshee
: 10/14/2014 09:27 AM Subject: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option Allowing unprivileged users to provide arbitrary xattrs via fuse mounts bypasses the normal restrictions on setting xattrs. Such mounts should be restricted

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-21 Thread Andy Lutomirski
W. Biederman ebied...@xmission.com, linux-fsde...@vger.kernel.org Date: 10/14/2014 09:27 AM Subject: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option Allowing unprivileged users to provide arbitrary xattrs via fuse mounts bypasses

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-21 Thread Michael j Theall
...@vger.kernel.org, linux-kernel@vger.kernel.org linux- ker...@vger.kernel.org, Miklos Szeredi mik...@szeredi.hu, Serge H. Hallyn serge.hal...@ubuntu.com Date: 10/21/2014 04:27 PM Subject: Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option On Tue, Oct

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-21 Thread Andy Lutomirski
On Tue, Oct 21, 2014 at 2:34 PM, Michael j Theall mthe...@us.ibm.com wrote: Andy Lutomirski l...@amacapital.net wrote on 10/21/2014 04:27:13 PM: But how does this help with FUSE at all? Does FUSE end up calling xattr_permission? --Andy The xattr system calls go through xattr_permission

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-21 Thread Seth Forshee
...@ubuntu.com, linux-kernel@vger.kernel.org, Seth Forshee seth.fors...@canonical.com, Eric W. Biederman ebied...@xmission.com, linux-fsde...@vger.kernel.org Date: 10/14/2014 09:27 AM Subject: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-15 Thread Andy Lutomirski
gt;>> >> To: Miklos Szeredi >> >>> >> Cc: fuse-de...@lists.sourceforge.net, "Serge H. Hallyn" >> >>> >> , linux-kernel@vger.kernel.org, Seth >> >>> >> Forshee , "Eric W. Biederman" >> >>>

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-15 Thread Seth Forshee
e.net, "Serge H. Hallyn" > >>> >> , linux-kernel@vger.kernel.org, Seth > >>> >> Forshee , "Eric W. Biederman" > >>> >> , linux-fsde...@vger.kernel.org > >>> >> Date: 10/14/2014 09:27 AM > >>> &

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-15 Thread Seth Forshee
@vger.kernel.org, Seth Forshee seth.fors...@canonical.com, Eric W. Biederman ebied...@xmission.com, linux-fsde...@vger.kernel.org Date: 10/14/2014 09:27 AM Subject: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option Allowing unprivileged users to provide

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-15 Thread Andy Lutomirski
...@lists.sourceforge.net, Serge H. Hallyn serge.hal...@ubuntu.com, linux-kernel@vger.kernel.org, Seth Forshee seth.fors...@canonical.com, Eric W. Biederman ebied...@xmission.com, linux-fsde...@vger.kernel.org Date: 10/14/2014 09:27 AM Subject: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-14 Thread Eric W. Biederman
, linux-kernel@vger.kernel.org, Seth >>>> >> Forshee , "Eric W. Biederman" >>>> >> , linux-fsde...@vger.kernel.org >>>> >> Date: 10/14/2014 09:27 AM >>>> >> Subject: [fuse-devel] [PATCH v4 4/5] fuse: Support privilege

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-14 Thread Andy Lutomirski
> > >>> >> From: Seth Forshee >>> >> To: Miklos Szeredi >>> >> Cc: fuse-de...@lists.sourceforge.net, "Serge H. Hallyn" >>> >> , linux-kernel@vger.kernel.org, Seth >>> >> Forshee , "Eric W. Biederman"

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-14 Thread Eric W. Biederman
;> >> Cc: fuse-de...@lists.sourceforge.net, "Serge H. Hallyn" >> >> , linux-kernel@vger.kernel.org, Seth >> >> Forshee , "Eric W. Biederman" >> >> , linux-fsde...@vger.kernel.org >> >> Date: 10/14/2014 09:27 AM >>

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-14 Thread Seth Forshee
e.net, "Serge H. Hallyn" > >> , linux-kernel@vger.kernel.org, Seth > >> Forshee , "Eric W. Biederman" > >> , linux-fsde...@vger.kernel.org > >> Date: 10/14/2014 09:27 AM > >> Subject: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xa

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-14 Thread Eric W. Biederman
c W. Biederman" >> , linux-fsde...@vger.kernel.org >> Date: 10/14/2014 09:27 AM >> Subject: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs >> only with a mount option >> >> Allowing unprivileged users to provide arbitrary xattrs via fuse >&

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-14 Thread Michael j Theall
> Date: 10/14/2014 09:27 AM > Subject: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs > only with a mount option > > Allowing unprivileged users to provide arbitrary xattrs via fuse > mounts bypasses the normal restrictions on setting xattrs. Such > mounts shoul

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-14 Thread Eric W. Biederman
: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option Allowing unprivileged users to provide arbitrary xattrs via fuse mounts bypasses the normal restrictions on setting xattrs. Such mounts should be restricted to reading and writing xattrs in the user

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-14 Thread Andy Lutomirski
...@xmission.com, linux-fsde...@vger.kernel.org Date: 10/14/2014 09:27 AM Subject: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option Allowing unprivileged users to provide arbitrary xattrs via fuse mounts bypasses the normal restrictions on setting xattrs

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-14 Thread Eric W. Biederman
...@canonical.com, Eric W. Biederman ebied...@xmission.com, linux-fsde...@vger.kernel.org Date: 10/14/2014 09:27 AM Subject: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option Allowing unprivileged users to provide arbitrary xattrs via fuse mounts

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-14 Thread Michael j Theall
...@canonical.com, Eric W. Biederman ebied...@xmission.com, linux-fsde...@vger.kernel.org Date: 10/14/2014 09:27 AM Subject: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option Allowing unprivileged users to provide arbitrary xattrs via fuse mounts bypasses

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-14 Thread Eric W. Biederman
-kernel@vger.kernel.org, Seth Forshee seth.fors...@canonical.com, Eric W. Biederman ebied...@xmission.com, linux-fsde...@vger.kernel.org Date: 10/14/2014 09:27 AM Subject: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option Allowing unprivileged users to provide

Re: [fuse-devel] [PATCH v4 4/5] fuse: Support privileged xattrs only with a mount option

2014-10-14 Thread Seth Forshee
...@lists.sourceforge.net, Serge H. Hallyn serge.hal...@ubuntu.com, linux-kernel@vger.kernel.org, Seth Forshee seth.fors...@canonical.com, Eric W. Biederman ebied...@xmission.com, linux-fsde...@vger.kernel.org Date: 10/14/2014 09:27 AM Subject: [fuse-devel] [PATCH v4 4/5] fuse: Support