From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id 8BD4DC433EF for ; Tue, 24 May 2022 07:07:53 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S233267AbiEXHHv (ORCPT ); Tue, 24 May 2022 03:07:51 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:33184 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229638AbiEXHHt (ORCPT ); Tue, 24 May 2022 03:07:49 -0400 Received: from mail-ej1-x629.google.com (mail-ej1-x629.google.com [IPv6:2a00:1450:4864:20::629]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 6653B87227 for ; Tue, 24 May 2022 00:07:47 -0700 (PDT) Received: by mail-ej1-x629.google.com with SMTP id jx22so19934287ejb.12 for ; Tue, 24 May 2022 00:07:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=szeredi.hu; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=TbmzqHnHKaEKiIDwuxbAGBPUkyBwUCwSvLomR0WvZ1A=; b=JcC6Jr6AXDFv1kQ9jVoFyyVX1bCtI3fFnt5nRAsuw+sIZmaz5Zrnd8dEFAptqDFPB3 gycJ0eFpu2rdJgjLDZ+gMhvzReKcOP3JtaTuERD/jW84Fw6TPp1TaLratZOeRI1Hm19e NIET7L72/J7JQuRcRFmY9YhaN/Dj5MIrVdm4A= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=TbmzqHnHKaEKiIDwuxbAGBPUkyBwUCwSvLomR0WvZ1A=; b=ns8zAQLa0tydFMXjeIfcLUDkQyBcTD1h29jUs43VPUosnsb4b/aQA8cDlzLVDrBr9F d2WquFcoSxdrC/A7NWnu4HX8yzlX3X2mjUll37fYxiEw/n1copBxgcpJ8yLWvsSZe8cq v5+mERtz7bn2hVS+v9cCVC8MbU3B//pu+LsDV36o7ZEG2JX6t/7jgndwVdRFN5sRwtg2 T/lZyDbsTT2qHCfKcVI7Cr0/XNiloXhbfEFmlk6W9oWtWrqRnwPGz67PNNePz6ix+2TU LgdSTUCAhWvYnpuJ1bHbcNpknjWaMuAeA8uyGppy7Gb387GIrM++tKBzvi50L/hlmkMm R01Q== X-Gm-Message-State: AOAM531V80V5HrUEd/1CqrfoMLLsWlg6VkVzCwpM1Fk+lF/666+X1O9/ /VOocRWnkl11b5dEhKPvTuDuOMj72+RvEykpioc9YX75nE+KvSLP X-Google-Smtp-Source: ABdhPJyuSKv66HMWwA8N9qnr58M68UlPUnI2v9pKk/izdXv/ESj4oWSXz93v9Qg/WorpEtCU4X2VCjVTi2O9Bnj7qWo= X-Received: by 2002:a17:907:c1e:b0:6ff:8ae:3bc3 with SMTP id ga30-20020a1709070c1e00b006ff08ae3bc3mr307497ejc.748.1653376065977; Tue, 24 May 2022 00:07:45 -0700 (PDT) MIME-Version: 1.0 References: <20211111221142.4096653-1-davemarchevsky@fb.com> <20211112101307.iqf3nhxgchf2u2i3@wittgenstein> <0515c3c8-c9e3-25dd-4b49-bb8e19c76f0d@fb.com> <20220518112229.s5nalbyd523nxxru@wittgenstein> <20220519085919.yqj2hvlzg7gpzby3@wittgenstein> In-Reply-To: From: Miklos Szeredi Date: Tue, 24 May 2022 09:07:34 +0200 Message-ID: Subject: Re: [PATCH] fuse: allow CAP_SYS_ADMIN in root userns to access allow_other mount To: Andrii Nakryiko Cc: Christian Brauner , Dave Marchevsky , linux-fsdevel@vger.kernel.org, Seth Forshee , Rik van Riel , kernel-team , Andrii Nakryiko , Chris Mason , Arnaldo Carvalho de Melo Content-Type: text/plain; charset="UTF-8" Precedence: bulk List-ID: X-Mailing-List: linux-fsdevel@vger.kernel.org On Tue, 24 May 2022 at 06:36, Andrii Nakryiko wrote: > I still think that tools like perf being able to provide good tracing > data is going to hurt due to this cautious rejection of access, but > with Kconfig we at least give an option for users to opt out of it. > WDYT? I'd rather use a module option for this, always defaulting to off . Then sysadmin then can choose to turn this protection off if necessary. This would effectively be the same as "user_allow_other" option in /etc/fuse.conf, which fusermount interprets but the kernel doesn't. Thanks, Miklos