Re: [PATCH] private mounts

From: Christoph Hellwig
Date: Tue Apr 26 2005 - 05:23:57 EST


On Tue, Apr 26, 2005 at 12:01:17PM +0200, Miklos Szeredi wrote:
> And for the first part, please _explain_ why you think it's crap.

Problem 1:

- you're mounting things into the global namespace, but expect it only
be visible to a certain subset of processes. these processes are also
not specicified by a tradition unix session / process group / etc but
against all the process attributes we have based on the uid

Problem 2, which is related:

- in fuse you're re-routing filesystem request to userspace, so fine so good
- mount is currently a privilegued operation, and expects a privilegued
filesystem implementation, not an ordinary user
- to bypass that you have a suid mount wrapper
- now you need various hacks to make sure this can't be used by other users

in short you are hacking around the namespace management which sits above
the filesystems in a rather broken way.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/