• Al Viro's avatar
    Ban ecryptfs over ecryptfs · c07661f2
    Al Viro authored
    (cherry picked from commit 4403158b)
    
    This is a seriously simplified patch from Eric Sandeen; copy of
    rationale follows:
    ===
      mounting stacked ecryptfs on ecryptfs has been shown to lead to bugs
      in testing.  For crypto info in xattr, there is no mechanism for handling
      this at all, and for normal file headers, we run into other trouble:
    
      BUG: unable to handle kernel NULL pointer dereference at 0000000000000008
      IP: [<ffffffffa015b0b3>] ecryptfs_d_revalidate+0x43/0xa0 [ecryptfs]
      ...
    
      There doesn't seem to be any good usecase for this, so I'd suggest just
      disallowing the configuration.
    
      Based on a patch originally, I believe, from Mike Halcrow.
    ===
    Signed-off-by: default avatarAl Viro <viro@zeniv.linux.org.uk>
    Signed-off-by: default avatarTim Gardner <tim.gardner@canonical.com>
    Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
    c07661f2
main.c 26.1 KB