Eric W. Biederman b5eb51f2ee mnt: Refactor the logic for mounting sysfs and proc in a user namespace ...

commit 1b852bceb0 upstream.

Fresh mounts of proc and sysfs are a very special case that works very
much like a bind mount.  Unfortunately the current structure can not
preserve the MNT_LOCK... mount flags.  Therefore refactor the logic
into a form that can be modified to preserve those lock bits.

Add a new filesystem flag FS_USERNS_VISIBLE that requires some mount
of the filesystem be fully visible in the current mount namespace,
before the filesystem may be mounted.

Move the logic for calling fs_fully_visible from proc and sysfs into
fs/namespace.c where it has greater access to mount namespace state.

Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2015-07-21 10:10:01 -07:00

..

array.c

proc: remove use of seq_printf return value

2015-04-15 16:35:25 -07:00

base.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2015-04-26 17:22:07 -07:00

cmdline.c

fs/proc: don't use module_init for non-modular core code

2014-01-23 16:37:02 -08:00

consoles.c

fs/proc: don't use module_init for non-modular core code

2014-01-23 16:37:02 -08:00

cpuinfo.c

fs/proc: don't use module_init for non-modular core code

2014-01-23 16:37:02 -08:00

devices.c

fs/proc: don't use module_init for non-modular core code

2014-01-23 16:37:02 -08:00

fd.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2015-04-26 17:22:07 -07:00

fd.h

proc: Move proc_fd() to fs/proc/fd.h

2013-05-01 17:29:39 -04:00

generic.c

proc: Allow creating permanently empty directories that serve as mount points

2015-07-21 10:10:00 -07:00

inode.c

proc: Allow creating permanently empty directories that serve as mount points

2015-07-21 10:10:00 -07:00

internal.h

proc: Allow creating permanently empty directories that serve as mount points

2015-07-21 10:10:00 -07:00

interrupts.c

fs/proc: don't use module_init for non-modular core code

2014-01-23 16:37:02 -08:00

Kconfig

kcore: add Kconfig help text

2013-11-13 12:09:33 +09:00

kcore.c

fs/proc/kcore.c: don't add modules range to kcore if it's equal to vmcore range

2014-10-09 22:25:50 -04:00

kmsg.c

fs/proc: don't use module_init for non-modular core code

2014-01-23 16:37:02 -08:00

loadavg.c

fs/proc: don't use module_init for non-modular core code

2014-01-23 16:37:02 -08:00

Makefile

proc: Implement /proc/thread-self to point at the directory of the current thread

2014-08-04 10:07:11 -07:00

meminfo.c

fs/proc/meminfo.c: include cma info in proc/meminfo

2014-12-18 19:08:10 -08:00

namespaces.c

VFS: normal filesystems (and lustre): d_inode() annotations

2015-04-15 15:06:57 -04:00

nommu.c

fs/proc: don't use module_init for non-modular core code

2014-01-23 16:37:02 -08:00

page.c

mm:add KPF_ZERO_PAGE flag for /proc/kpageflags

2015-02-11 17:06:00 -08:00

proc_net.c

VFS: normal filesystems (and lustre): d_inode() annotations

2015-04-15 15:06:57 -04:00

proc_sysctl.c

sysctl: Allow creating permanently empty directories that serve as mountpoints.

2015-07-21 10:10:00 -07:00

proc_tty.c

proc: remove proc_tty_ldisc variable

2014-08-08 15:57:22 -07:00

root.c

mnt: Refactor the logic for mounting sysfs and proc in a user namespace

2015-07-21 10:10:01 -07:00

self.c

VFS: normal filesystems (and lustre): d_inode() annotations

2015-04-15 15:06:57 -04:00

softirqs.c

fs/proc: don't use module_init for non-modular core code

2014-01-23 16:37:02 -08:00

stat.c

genirq: Prevent proc race against freeing of irq descriptors

2014-12-13 13:33:07 +01:00

task_mmu.c

pagemap: do not leak physical addresses to non-privileged userspace

2015-03-17 09:31:30 -07:00

task_nommu.c

proc/maps: make vm_is_stack() logic namespace-friendly

2014-10-09 22:25:50 -04:00

thread_self.c

VFS: normal filesystems (and lustre): d_inode() annotations

2015-04-15 15:06:57 -04:00

uptime.c

cputime: Default implementation of nsecs -> cputime conversion

2014-03-13 15:56:43 +01:00

version.c

fs/proc: don't use module_init for non-modular core code

2014-01-23 16:37:02 -08:00

vmcore.c

vmcore: fix PT_NOTE n_namesz, n_descsz overflow issue

2015-02-17 14:34:52 -08:00