From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S934068AbeE2Mm5 (ORCPT ); Tue, 29 May 2018 08:42:57 -0400 Received: from out01.mta.xmission.com ([166.70.13.231]:39643 "EHLO out01.mta.xmission.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S933565AbeE2Mmw (ORCPT ); Tue, 29 May 2018 08:42:52 -0400 From: ebiederm@xmission.com (Eric W. Biederman) To: Miklos Szeredi Cc: lkml , Linux Containers , linux-fsdevel , Alban Crequy , Seth Forshee , Sargun Dhillon , Dongsu Park , "Serge E. Hallyn" , Miklos Szeredi References: <87r2mre5b3.fsf@xmission.com> <87wovubbdf.fsf@xmission.com> Date: Tue, 29 May 2018 07:42:35 -0500 In-Reply-To: <87wovubbdf.fsf@xmission.com> (Eric W. Biederman's message of "Wed, 23 May 2018 11:11:24 -0500") Message-ID: <877enmskec.fsf@xmission.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-XM-SPF: eid=1fNdxh-0003Wy-EO;;;mid=<877enmskec.fsf@xmission.com>;;;hst=in02.mta.xmission.com;;;ip=97.119.174.25;;;frm=ebiederm@xmission.com;;;spf=neutral X-XM-AID: U2FsdGVkX18a0sxZTkZXm8QbbBxsF4Ez1ipIovNQuyw= X-SA-Exim-Connect-IP: 97.119.174.25 X-SA-Exim-Mail-From: ebiederm@xmission.com X-Spam-Report: * -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP * 0.7 XMSubLong Long Subject * 0.0 T_TM2_M_HEADER_IN_MSG BODY: No description available. * 1.2 LotsOfNums_01 BODY: Lots of long strings of numbers * 0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60% * [score: 0.5000] * -0.0 DCC_CHECK_NEGATIVE Not listed in DCC * [sa02 1397; Body=1 Fuz1=1 Fuz2=1] X-Spam-DCC: XMission; sa02 1397; Body=1 Fuz1=1 Fuz2=1 X-Spam-Combo: *;Miklos Szeredi X-Spam-Relay-Country: X-Spam-Timing: total 830 ms - load_scoreonly_sql: 0.09 (0.0%), signal_user_changed: 3.4 (0.4%), b_tie_ro: 2.2 (0.3%), parse: 1.51 (0.2%), extract_message_metadata: 28 (3.4%), get_uri_detail_list: 4.7 (0.6%), tests_pri_-1000: 11 (1.3%), tests_pri_-950: 2.2 (0.3%), tests_pri_-900: 1.79 (0.2%), tests_pri_-400: 40 (4.8%), check_bayes: 37 (4.5%), b_tokenize: 16 (1.9%), b_tok_get_all: 9 (1.0%), b_comp_prob: 5 (0.7%), b_tok_touch_all: 3.6 (0.4%), b_finish: 0.88 (0.1%), tests_pri_0: 726 (87.4%), check_dkim_signature: 1.11 (0.1%), check_dkim_adsp: 4.9 (0.6%), tests_pri_500: 11 (1.3%), rewrite_mail: 0.00 (0.0%) Subject: Re: [PATCH] fuse: Ensure posix acls are translated outside of init_user_ns X-Spam-Flag: No X-SA-Exim-Version: 4.2.1 (built Thu, 05 May 2016 13:38:54 -0600) X-SA-Exim-Scanned: Yes (on in02.mta.xmission.com) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org ebiederm@xmission.com (Eric W. Biederman) writes: > ebiederm@xmission.com (Eric W. Biederman) writes: > >> Ensure the translation happens by failing to read or write >> posix acls when the filesystem has not indicated it supports >> posix acls. >> >> This ensures that modern cached posix acl support is available >> and used when dealing with posix acls. This is important >> because only that path has the code to convernt the uids and >> gids in posix acls into the user namespace of a fuse filesystem. >> >> Signed-off-by: "Eric W. Biederman" >> --- > > ping. > > Miklos are you around where you can look at this? Perhaps I got the wrong email address. Ping? > >> Miklos after several attempts to handle this better last cycle. I >> figure we should go with the stupid version for now. I think I know >> how to do better but I don't want that to gate forward progress on >> fully unprivileged fuse mounts. Especially as this is the last known >> issue to deal with. >> >> fs/fuse/fuse_i.h | 1 + >> fs/fuse/inode.c | 7 +++++++ >> fs/fuse/xattr.c | 43 +++++++++++++++++++++++++++++++++++++++++++ >> 3 files changed, 51 insertions(+) >> >> diff --git a/fs/fuse/fuse_i.h b/fs/fuse/fuse_i.h >> index f630951df8dc..5256ad333b05 100644 >> --- a/fs/fuse/fuse_i.h >> +++ b/fs/fuse/fuse_i.h >> @@ -985,6 +985,7 @@ ssize_t fuse_listxattr(struct dentry *entry, char *list, size_t size); >> int fuse_removexattr(struct inode *inode, const char *name); >> extern const struct xattr_handler *fuse_xattr_handlers[]; >> extern const struct xattr_handler *fuse_acl_xattr_handlers[]; >> +extern const struct xattr_handler *fuse_no_acl_xattr_handlers[]; >> >> struct posix_acl; >> struct posix_acl *fuse_get_acl(struct inode *inode, int type); >> diff --git a/fs/fuse/inode.c b/fs/fuse/inode.c >> index 1643043d4fe5..22c76cf8c2e3 100644 >> --- a/fs/fuse/inode.c >> +++ b/fs/fuse/inode.c >> @@ -1100,6 +1100,13 @@ static int fuse_fill_super(struct super_block *sb, void *data, int silent) >> file->f_cred->user_ns != sb->s_user_ns) >> goto err_fput; >> >> + /* >> + * If we are not in the initial user namespace posix >> + * acls must be translated. >> + */ >> + if (sb->s_user_ns != &init_user_ns) >> + sb->s_xattr = fuse_no_acl_xattr_handlers; >> + >> fc = kmalloc(sizeof(*fc), GFP_KERNEL); >> err = -ENOMEM; >> if (!fc) >> diff --git a/fs/fuse/xattr.c b/fs/fuse/xattr.c >> index 3caac46b08b0..433717640f78 100644 >> --- a/fs/fuse/xattr.c >> +++ b/fs/fuse/xattr.c >> @@ -192,6 +192,26 @@ static int fuse_xattr_set(const struct xattr_handler *handler, >> return fuse_setxattr(inode, name, value, size, flags); >> } >> >> +static bool no_xattr_list(struct dentry *dentry) >> +{ >> + return false; >> +} >> + >> +static int no_xattr_get(const struct xattr_handler *handler, >> + struct dentry *dentry, struct inode *inode, >> + const char *name, void *value, size_t size) >> +{ >> + return -EOPNOTSUPP; >> +} >> + >> +static int no_xattr_set(const struct xattr_handler *handler, >> + struct dentry *dentry, struct inode *nodee, >> + const char *name, const void *value, >> + size_t size, int flags) >> +{ >> + return -EOPNOTSUPP; >> +} >> + >> static const struct xattr_handler fuse_xattr_handler = { >> .prefix = "", >> .get = fuse_xattr_get, >> @@ -209,3 +229,26 @@ const struct xattr_handler *fuse_acl_xattr_handlers[] = { >> &fuse_xattr_handler, >> NULL >> }; >> + >> +static const struct xattr_handler fuse_no_acl_access_xattr_handler = { >> + .name = XATTR_NAME_POSIX_ACL_ACCESS, >> + .flags = ACL_TYPE_ACCESS, >> + .list = no_xattr_list, >> + .get = no_xattr_get, >> + .set = no_xattr_set, >> +}; >> + >> +static const struct xattr_handler fuse_no_acl_default_xattr_handler = { >> + .name = XATTR_NAME_POSIX_ACL_DEFAULT, >> + .flags = ACL_TYPE_ACCESS, >> + .list = no_xattr_list, >> + .get = no_xattr_get, >> + .set = no_xattr_set, >> +}; >> + >> +const struct xattr_handler *fuse_no_acl_xattr_handlers[] = { >> + &fuse_no_acl_access_xattr_handler, >> + &fuse_no_acl_default_xattr_handler, >> + &fuse_xattr_handler, >> + NULL >> +};