[Devel] [PATCH rh8 2/4] ve/fs/nfs: NFS containerization - allow to mount NFS in CT root userns

Konstantin Khorenko khorenko at virtuozzo.com
Thu Mar 18 20:04:07 MSK 2021


Note: mounting NFS shares in any other nested userns is still
prohibited.

Fixes: 25ba8fad0662 ("ve/fs/nfs: NFS containerization")
https://jira.sw.ru/browse/PSBM-127234

Signed-off-by: Konstantin Khorenko <khorenko at virtuozzo.com>
---
 fs/nfs/super.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/fs/nfs/super.c b/fs/nfs/super.c
index 3093cb4dac13..ec023ddea295 100644
--- a/fs/nfs/super.c
+++ b/fs/nfs/super.c
@@ -304,7 +304,7 @@ struct file_system_type nfs_fs_type = {
 	.mount		= nfs_fs_mount,
 	.kill_sb	= nfs_kill_super,
 	.fs_flags	= FS_RENAME_DOES_D_MOVE|FS_BINARY_MOUNTDATA|
-			  FS_VIRTUALIZED,
+			  FS_VIRTUALIZED|FS_VE_MOUNT,
 };
 MODULE_ALIAS_FS("nfs");
 EXPORT_SYMBOL_GPL(nfs_fs_type);
@@ -344,7 +344,7 @@ struct file_system_type nfs4_fs_type = {
 	.mount		= nfs_fs_mount,
 	.kill_sb	= nfs_kill_super,
 	.fs_flags	= FS_RENAME_DOES_D_MOVE|FS_BINARY_MOUNTDATA|
-			  FS_VIRTUALIZED,
+			  FS_VIRTUALIZED|FS_VE_MOUNT,
 };
 MODULE_ALIAS_FS("nfs4");
 MODULE_ALIAS("nfs4");
-- 
2.28.0



More information about the Devel mailing list