Re: [PATCH] userns: allow privileged user to operate locked mount

2013-11-14 Thread Eric W. Biederman
Gao feng writes: > On 11/15/2013 07:50 AM, Eric W. Biederman wrote: >> Gao feng writes: >> >>> Privileged user should have rights to mount/umount/move >>> these even locked mount. >> >> Hmm. This is pretty much a can't happen case, as the only exist in mount >> namespaces where the global root

Re: [PATCH] userns: allow privileged user to operate locked mount

2013-11-14 Thread Gao feng
On 11/15/2013 07:50 AM, Eric W. Biederman wrote: > Gao feng writes: > >> Privileged user should have rights to mount/umount/move >> these even locked mount. > > Hmm. This is pretty much a can't happen case, as the only exist in mount > namespaces where the global root isn't the root. How are yo

Re: [PATCH] userns: allow privileged user to operate locked mount

2013-11-14 Thread Eric W. Biederman
Gao feng writes: > Privileged user should have rights to mount/umount/move > these even locked mount. Hmm. This is pretty much a can't happen case, as the only exist in mount namespaces where the global root isn't the root. How are you getting into this situation? Using setns() ? Why would we