Re: [RCF] [PATCH] unprivileged mount/umount

[Miklos Szeredi]

> > You could argue about the usefulness of ptrace.  The point is, that
> > suid/sgid programs _can_ be discerned, and ptrace _needs_ to discern
> > them.
> 
> I actually neither needs to, nor does. For ptrace the definition is:
>     If the tracee has different privilegies, than the tracer, than it
>     can't be traced.

Right.  I was talking about suid/sgid because with private namespaces
(unless there's a way to enter them externally) only suid/sgid
programs will have different privileges.

> For this definition, the check is not a hack. It's the only way to go.
> 
> Now this definition is really what is needed for the filesystem case
> too, so I think it's not a hack either. 

Fully agreed.

Miklos
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/