Re: [PATCH v2 1/1] OverlayFS: Fix checking permissions during lookup.

[Nazarov Sergey]

26.02.2016, 22:41, "Vivek Goyal" <vgoyal@xxxxxxxxxx>:
>
> So what's the problem we are trying to solve. Why should we able to
> override the DAC checks of lower layer if same directory in upper
> is searchable for user but it is not searchable in lower layer.
>

If I right, this is a one of the main feature of overlayfs - upper layer has priority over lower ones.
Override AC checks necessary for lookup operation only. Lower layer files access AC checks
remain, so this should not be a security problem.
Sergey.