From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1757826AbbEVRta (ORCPT ); Fri, 22 May 2015 13:49:30 -0400 Received: from out03.mta.xmission.com ([166.70.13.233]:44694 "EHLO out03.mta.xmission.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1757476AbbEVRt2 (ORCPT ); Fri, 22 May 2015 13:49:28 -0400 From: ebiederm@xmission.com (Eric W. Biederman) To: Seth Forshee Cc: Miklos Szeredi , alexey@kurnosov.spb.ru, Andy Lutomirski , Serge Hallyn , fuse-devel , Linux-Fsdevel , Kernel Mailing List References: <20150331011423.GC13083@unsen.q53.spb.ru> <20150401155515.GA2994@unsen.q53.spb.ru> <20150502155623.GD13083@unsen.q53.spb.ru> <20150522144702.GA126334@ubuntu-hedt> Date: Fri, 22 May 2015 12:44:35 -0500 In-Reply-To: <20150522144702.GA126334@ubuntu-hedt> (Seth Forshee's message of "Fri, 22 May 2015 09:47:02 -0500") Message-ID: <87iobk4id8.fsf@x220.int.ebiederm.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-XM-AID: U2FsdGVkX1+/y+NlecHfg3lV+t3nXQcfQvlA9QKFIOU= X-SA-Exim-Connect-IP: 67.3.205.90 X-SA-Exim-Mail-From: ebiederm@xmission.com X-Spam-Report: * -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP * 0.0 TVD_RCVD_IP Message was received from an IP address * 0.0 T_TM2_M_HEADER_IN_MSG BODY: No description available. * 0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60% * [score: 0.5000] * -0.0 DCC_CHECK_NEGATIVE Not listed in DCC * [sa05 1397; Body=1 Fuz1=1 Fuz2=1] * 0.0 T_TooManySym_01 4+ unique symbols in subject * 0.0 T_TooManySym_03 6+ unique symbols in subject * 0.0 T_TooManySym_02 5+ unique symbols in subject X-Spam-DCC: XMission; sa05 1397; Body=1 Fuz1=1 Fuz2=1 X-Spam-Combo: ;Seth Forshee X-Spam-Relay-Country: X-Spam-Timing: total 643 ms - load_scoreonly_sql: 0.05 (0.0%), signal_user_changed: 3.0 (0.5%), b_tie_ro: 2.1 (0.3%), parse: 0.99 (0.2%), extract_message_metadata: 30 (4.7%), get_uri_detail_list: 3.8 (0.6%), tests_pri_-1000: 16 (2.6%), tests_pri_-950: 1.44 (0.2%), tests_pri_-900: 1.14 (0.2%), tests_pri_-400: 31 (4.9%), check_bayes: 30 (4.7%), b_tokenize: 11 (1.7%), b_tok_get_all: 10 (1.5%), b_comp_prob: 3.7 (0.6%), b_tok_touch_all: 3.7 (0.6%), b_finish: 0.63 (0.1%), tests_pri_0: 549 (85.4%), tests_pri_500: 6 (0.9%), rewrite_mail: 0.00 (0.0%) Subject: Re: [fuse-devel] fuse_get_context() and namespaces X-Spam-Flag: No X-SA-Exim-Version: 4.2.1 (built Wed, 24 Sep 2014 11:00:52 -0600) X-SA-Exim-Scanned: Yes (on in02.mta.xmission.com) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Seth Forshee writes: > On Fri, May 22, 2015 at 04:23:55PM +0200, Miklos Szeredi wrote: >> On Sat, May 2, 2015 at 5:56 PM, wrote: >> > >> > 3.10.0-229 form Scientific Linux and native 4.0.1-1 (from elrepo). >> > SL 7.1 on the host and SL 6.6 on the LXC guest. At least in 3.10 >> > the 499dcf2024092e5cce41d05599a5b51d1f92031a is present. >> > Steps to reproduce: >> > >> > On first console: >> > [root@sl7test ~]# lxc-start -n test-2 /bin/su - >> > [root@test-2 ~]# diff -u hello.py /usr/share/doc/fuse-python-0.2.1/example/hello.py >> > --- hello.py 2015-05-02 11:12:13.963093580 -0400 >> > +++ /usr/share/doc/fuse-python-0.2.1/example/hello.py 2010-04-14 18:29:21.000000000 -0400 >> > @@ -41,8 +41,6 @@ >> > class HelloFS(Fuse): >> > >> > def getattr(self, path): >> > - dic = Fuse.GetContext(self) >> > - print dic >> > st = MyStat() >> > if path == '/': >> > st.st_mode = stat.S_IFDIR | 0755 >> > [root@test-2 ~]# python hello.py -f /mnt/ >> > >> > On second console: >> > [root@test-2 ~]# echo $$ >> > 41 >> > [root@test-2 ~]# ls /mnt/ >> > hello >> > >> > Output of first console: >> > {'gid': 0, 'pid': 12083, 'uid': 0} >> >> Thanks. >> >> Digging in mailbox... There was a thread last year about adding >> support for running fuse daemon in a container: >> >> http://thread.gmane.org/gmane.linux.kernel/1811658 >> >> Not sure what happened, but no updated patches have been posted or >> maybe I just missed them. > > I haven't sent updated patches in a while. I still intend to, but I > shifted focus to first getting general support for mounts from user > namespaces into the vfs (which will give a clearer direction for some of > the concerns raised about the fuse patches). > > All of this code is available in the userns-mounts branch of > git://kernel.ubuntu.com/sforshee/linux.git, and I don't think the fuse > patches actually depend on any of the stuff that precedes them. I'm > planning to start submitting some of the earlier patches from that > branch soon, and eventually get back to resubmitting the fuse patches. > > This is about pid namespaces though, and the fuse pid namespace patch > from that series (see below) should be more or less independent of the > rest of the patches. Potentially that could be merged separately from > the user namespae stuff. [snip] > @@ -2076,7 +2077,15 @@ static int convert_fuse_file_lock(const struct fuse_file_lock *ffl, > > fl->fl_start = ffl->start; > fl->fl_end = ffl->end; > - fl->fl_pid = ffl->pid; > + > + /* > + * Convert pid into the connection's pid namespace. If the > + * pid does not map into the namespace fl_pid will get set > + * to 0. > + */ > + rcu_read_lock(); > + fl->fl_pid = pid_vnr(find_pid_ns(ffl->pid, fc->pid_ns)); > + rcu_read_unlock(); Scratches my head. This looks wrong. I would have expected pid_nr_ns. Am I missing something reading this patch quickly? Eric