• Seth Forshee's avatar
    fuse: Support fuse filesystems outside of init_user_ns · 7aa34f41
    Seth Forshee authored
    Update fuse to translate uids and gids to/from the user namspace
    of the process servicing requests on /dev/fuse. Any ids which do
    not map into the namespace will result in errors. inodes will
    also be marked bad when unmappable ids are received from
    userspace.
    
    Due to security concerns the namespace used should be fixed,
    otherwise a user might be able to gain elevated privileges or
    influence processes that the user would otherwise be unable to
    manipulate. Thus the namespace of the mounting process is used
    for all translations, and this namespace is required to be the
    same as the one in use when /dev/fuse was opened.
    
    Cc: Eric W. Biederman <ebiederm@xmission.com>
    Cc: Serge H. Hallyn <serge.hallyn@ubuntu.com>
    Cc: Andy Lutomirski <luto@amacapital.net>
    Signed-off-by: default avatarSeth Forshee <seth.forshee@canonical.com>
    7aa34f41
inode.c 31.8 KB