Re: [PATCH] private mounts

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, Apr 26, 2005 at 12:01:17PM +0200, Miklos Szeredi wrote:
> And for the first part, please _explain_ why you think it's crap.

Problem 1:

 - you're mounting things into the global namespace, but expect it only
   be visible to a certain subset of processes.  these processes are also
   not specicified by a tradition unix session / process group / etc but
   against all the process attributes we have based on the uid

Problem 2, which is related:

 - in fuse you're re-routing filesystem request to userspace, so fine so good
 - mount is currently a privilegued operation, and expects a privilegued
   filesystem implementation, not an ordinary user
 - to bypass that you have a suid mount wrapper
 - now you need various hacks to make sure this can't be used by other users

in short you are hacking around the namespace management which sits above
the filesystems in a rather broken way.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

[Index of Archives]     [Kernel Newbies]     [Netfilter]     [Bugtraq]     [Photo]     [Stuff]     [Gimp]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Video 4 Linux]     [Linux for the blind]     [Linux Resources]
  Powered by Linux