Eric W. Biederman 7a472ef4be vfs: Only support slave subtrees across different user namespaces ...

Sharing mount subtress with mount namespaces created by unprivileged
users allows unprivileged mounts created by unprivileged users to
propagate to mount namespaces controlled by privileged users.

Prevent nasty consequences by changing shared subtrees to slave
subtress when an unprivileged users creates a new mount namespace.

Acked-by: Serge Hallyn <serge.hallyn@canonical.com>
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>

2012-11-19 05:59:20 -08:00

1.5 KiB

Raw Blame History

View Raw