Re: [PATCH v4 18/21] fuse: Add support for pid namespaces

2016-07-21 Thread Miklos Szeredi
On Wed, Jul 20, 2016 at 2:52 PM, Seth Forshee wrote: > It sounds like we need to remove the restriction on accessing the > filesystem from a different pid namespace. I don't think this poses a > security problem. However there's no pid mapping that is usable by the > userspace fuse process, so wh

Re: [PATCH v4 18/21] fuse: Add support for pid namespaces

2016-07-20 Thread Sheng Yang
On Wed, Jul 20, 2016 at 5:52 AM, Seth Forshee wrote: > On Tue, Jul 19, 2016 at 07:44:11PM -0700, Sheng Yang wrote: >> On Tue, Apr 26, 2016 at 12:36 PM, Seth Forshee >> wrote: >> > When the userspace process servicing fuse requests is running in >> > a pid namespace then pids passed via the fuse f

Re: [PATCH v4 18/21] fuse: Add support for pid namespaces

2016-07-20 Thread Seth Forshee
On Tue, Jul 19, 2016 at 07:44:11PM -0700, Sheng Yang wrote: > On Tue, Apr 26, 2016 at 12:36 PM, Seth Forshee > wrote: > > When the userspace process servicing fuse requests is running in > > a pid namespace then pids passed via the fuse fd are not being > > translated into that process' namespace.

Re: [PATCH v4 18/21] fuse: Add support for pid namespaces

2016-07-19 Thread Sheng Yang
On Tue, Apr 26, 2016 at 12:36 PM, Seth Forshee wrote: > When the userspace process servicing fuse requests is running in > a pid namespace then pids passed via the fuse fd are not being > translated into that process' namespace. Translation is necessary > for the pid to be useful to that process.

[PATCH v4 18/21] fuse: Add support for pid namespaces

2016-04-26 Thread Seth Forshee
When the userspace process servicing fuse requests is running in a pid namespace then pids passed via the fuse fd are not being translated into that process' namespace. Translation is necessary for the pid to be useful to that process. Since no use case currently exists for changing namespaces all