Re: [REVIEW][PATCH] vfs: Lock in place mounts from more privileged users

2013-07-24 Thread Serge E. Hallyn
Quoting Eric W. Biederman (ebied...@xmission.com): > "Serge E. Hallyn" writes: > > > Quoting Serge E. Hallyn (se...@hallyn.com): > >> Quoting Eric W. Biederman (ebied...@xmission.com): > >> > > >> > Serge does this patch break lxc? I think all should be well but I want > >> > to make certain th

Re: [REVIEW][PATCH] vfs: Lock in place mounts from more privileged users

2013-07-24 Thread Eric W. Biederman
"Serge E. Hallyn" writes: > Quoting Serge E. Hallyn (se...@hallyn.com): >> Quoting Eric W. Biederman (ebied...@xmission.com): >> > >> > Serge does this patch break lxc? I think all should be well but I want >> > to make certain there is not some hidden case where this fundamentaly >> > breaks s

Re: [REVIEW][PATCH] vfs: Lock in place mounts from more privileged users

2013-07-24 Thread Andy Lutomirski
On Tue, Jul 23, 2013 at 11:50 PM, Eric W. Biederman wrote: > Andy Lutomirski writes: >> On Tue, Jul 23, 2013 at 11:30 AM, Eric W. Biederman >> wrote: >>> >>> When creating a less privileged mount namespace or propogating mounts >>> from a more privileged to a less privileged mount namespace lock

Re: [REVIEW][PATCH] vfs: Lock in place mounts from more privileged users

2013-07-24 Thread Serge E. Hallyn
Quoting Serge E. Hallyn (se...@hallyn.com): > Quoting Eric W. Biederman (ebied...@xmission.com): > > > > Serge does this patch break lxc? I think all should be well but I want > > to make certain there is not some hidden case where this fundamentaly > > breaks some functionality. > > I haven't y

Re: [REVIEW][PATCH] vfs: Lock in place mounts from more privileged users

2013-07-24 Thread Serge E. Hallyn
Quoting Eric W. Biederman (ebied...@xmission.com): > > Serge does this patch break lxc? I think all should be well but I want > to make certain there is not some hidden case where this fundamentaly > breaks some functionality. I haven't yet tried. I'll build and test a kernel today. I'm pretty

Re: [REVIEW][PATCH] vfs: Lock in place mounts from more privileged users

2013-07-23 Thread Eric W. Biederman
Serge does this patch break lxc? I think all should be well but I want to make certain there is not some hidden case where this fundamentaly breaks some functionality. Andy Lutomirski writes: > On Tue, Jul 23, 2013 at 11:30 AM, Eric W. Biederman > wrote: >> >> When creating a less privileged

Re: [REVIEW][PATCH] vfs: Lock in place mounts from more privileged users

2013-07-23 Thread Andy Lutomirski
On Tue, Jul 23, 2013 at 11:30 AM, Eric W. Biederman wrote: > > When creating a less privileged mount namespace or propogating mounts > from a more privileged to a less privileged mount namespace lock the > submounts so they may not be unmounted individually in the child mount > namespace revealing