Re: unprivileged mounts git tree

[Miklos Szeredi]

On Thu, 11 Sep 2008, ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
> There is a weird corner case I'm trying to wrap my head around.
> unlink and rmdir do not work on dentries that are mount points
> in another mount namespace.
> 
> Which is at least needed for the moment so we don't leak mounts.
> 
> Once we have unprivileged mounts does that introduce a DOS attack?

Hmm, yes.  That's a tough one...

I think if the dentry has only user mounts, unlink should go ahead and
on success dissolve any mounts on the dentry.  Does that sound
workable?

Thanks,
Miklos
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/