[Devel] Re: [patch 7/8] allow unprivileged mounts
Jan Engelhardt
jengelh at linux01.gwdg.de
Sat Apr 21 08:43:28 PDT 2007
On Apr 21 2007 08:10, Eric W. Biederman wrote:
>>
>>> Define a new fs flag FS_SAFE, which denotes, that unprivileged
>>> mounting of this filesystem may not constitute a security problem.
>>>
>>> Since most filesystems haven't been designed with unprivileged
>>> mounting in mind, a thorough audit is needed before setting this flag.
>>
>> Practically speaking, is there any realistic likelihood that any filesystem
>> apart from FUSE will ever use this?
>
>Also potentially some of the kernel virtual filesystems. /proc should
>be safe already. If you don't have any kind of backing store this problem
>gets easier.
tmpfs!
Jan
--
_______________________________________________
Containers mailing list
Containers at lists.linux-foundation.org
https://lists.linux-foundation.org/mailman/listinfo/containers
More information about the Devel
mailing list