Re: [lxc-devel] [PATCH 3/3] fuse: Allow mounts from user namespaces

2014-08-15 Thread Seth Forshee
On Sat, Jul 26, 2014 at 06:27:36PM +0200, Miklos Szeredi wrote: > On Fri, Jul 25, 2014 at 9:46 PM, Seth Forshee > wrote: > > > > > I'd appreciate it if you could take a look at these branches and let me > > know which way you want to go so I'll know where to focus my time. > > I'll be offline fo

Re: [lxc-devel] [PATCH 3/3] fuse: Allow mounts from user namespaces

2014-07-29 Thread Miklos Szeredi
On Fri, Jul 25, 2014 at 9:46 PM, Seth Forshee wrote: > > I'd appreciate it if you could take a look at these branches and let me > know which way you want to go so I'll know where to focus my time. I'll be offline for the following week, and will have a look after that. Thanks, Mikos __

Re: [lxc-devel] [PATCH 3/3] fuse: Allow mounts from user namespaces

2014-07-25 Thread Seth Forshee
On Mon, Jul 21, 2014 at 10:30:44PM -0500, Seth Forshee wrote: > On Mon, Jul 21, 2014 at 11:02:53AM -0700, Eric W. Biederman wrote: > > Seth Forshee writes: > > > > > On Mon, Jul 21, 2014 at 03:09:14PM +0200, Miklos Szeredi wrote: > > >> On Mon, Jul 21, 2014 at 2:47 PM, Seth Forshee > > >> wrote:

Re: [lxc-devel] [PATCH 3/3] fuse: Allow mounts from user namespaces

2014-07-25 Thread Seth Forshee
On Mon, Jul 21, 2014 at 11:02:53AM -0700, Eric W. Biederman wrote: > Seth Forshee writes: > > > On Mon, Jul 21, 2014 at 03:09:14PM +0200, Miklos Szeredi wrote: > >> On Mon, Jul 21, 2014 at 2:47 PM, Seth Forshee > >> wrote: > >> > On Fri, Jul 18, 2014 at 05:33:23PM +0200, Miklos Szeredi wrote: >

Re: [lxc-devel] [PATCH 3/3] fuse: Allow mounts from user namespaces

2014-07-21 Thread Eric W. Biederman
Seth Forshee writes: > On Mon, Jul 21, 2014 at 03:09:14PM +0200, Miklos Szeredi wrote: >> On Mon, Jul 21, 2014 at 2:47 PM, Seth Forshee >> wrote: >> > On Fri, Jul 18, 2014 at 05:33:23PM +0200, Miklos Szeredi wrote: >> >> On Mon, Jul 14, 2014 at 9:18 PM, Seth Forshee >> >> wrote: >> >> > Update

Re: [lxc-devel] [PATCH 3/3] fuse: Allow mounts from user namespaces

2014-07-21 Thread Seth Forshee
On Mon, Jul 21, 2014 at 03:09:14PM +0200, Miklos Szeredi wrote: > On Mon, Jul 21, 2014 at 2:47 PM, Seth Forshee > wrote: > > On Fri, Jul 18, 2014 at 05:33:23PM +0200, Miklos Szeredi wrote: > >> On Mon, Jul 14, 2014 at 9:18 PM, Seth Forshee > >> wrote: > >> > Update fuse to allow mounts from user

Re: [lxc-devel] [PATCH 3/3] fuse: Allow mounts from user namespaces

2014-07-21 Thread Miklos Szeredi
On Mon, Jul 21, 2014 at 2:47 PM, Seth Forshee wrote: > On Fri, Jul 18, 2014 at 05:33:23PM +0200, Miklos Szeredi wrote: >> On Mon, Jul 14, 2014 at 9:18 PM, Seth Forshee >> wrote: >> > Update fuse to allow mounts from user namespaces. During mount >> > current_user_ns() is stashed away, >> >> Same

Re: [lxc-devel] [PATCH 3/3] fuse: Allow mounts from user namespaces

2014-07-21 Thread Seth Forshee
On Fri, Jul 18, 2014 at 05:33:23PM +0200, Miklos Szeredi wrote: > On Mon, Jul 14, 2014 at 9:18 PM, Seth Forshee > wrote: > > Update fuse to allow mounts from user namespaces. During mount > > current_user_ns() is stashed away, > > Same thing here. While practically this may work, it's theoretica

Re: [lxc-devel] [PATCH 3/3] fuse: Allow mounts from user namespaces

2014-07-18 Thread Miklos Szeredi
On Mon, Jul 14, 2014 at 9:18 PM, Seth Forshee wrote: > Update fuse to allow mounts from user namespaces. During mount > current_user_ns() is stashed away, Same thing here. While practically this may work, it's theoretically wrong, and possibly may go wrong in special situations. In fuse there'

[lxc-devel] [PATCH 3/3] fuse: Allow mounts from user namespaces

2014-07-14 Thread Seth Forshee
Update fuse to allow mounts from user namespaces. During mount current_user_ns() is stashed away, and this is used for all uid and gid mappings. The restriction on mounting from only init_user_ns is lifted, and the FS_USERNS_MOUNT flag is added to the flags for the fuse fs type (but not for fuseblk