linux/fs/pnode.h, branch v3.9

vfs: Carefully propogate mounts across user namespaces

2013-03-27T14:50:05Z

As a matter of policy MNT_READONLY should not be changable if the original mounter had more privileges than creator of the mount namespace. Add the flag CL_UNPRIVILEGED to note when we are copying a mount from a mount namespace that requires more privileges to a mount namespace that requires fewer privileges. When the CL_UNPRIVILEGED flag is set cause clone_mnt to set MNT_NO_REMOUNT if any of the mnt flags that should never be changed are set. This protects both mount propagation and the initial creation of a less privileged mount namespace. Cc: stable@vger.kernel.org Acked-by: Serge Hallyn Reported-by: Andy Lutomirski Signed-off-by: "Eric W. Biederman"

vfs: Only support slave subtrees across different user namespaces

2012-11-19T13:59:20Z

Sharing mount subtress with mount namespaces created by unprivileged users allows unprivileged mounts created by unprivileged users to propagate to mount namespaces controlled by privileged users. Prevent nasty consequences by changing shared subtrees to slave subtress when an unprivileged users creates a new mount namespace. Acked-by: Serge Hallyn Signed-off-by: "Eric W. Biederman"

vfs: switch pnode.h macros to struct mount *

2012-01-04T03:57:11Z

Signed-off-by: Al Viro

vfs: spread struct mount - remaining argument of mnt_set_mountpoint()

2012-01-04T03:57:07Z

Signed-off-by: Al Viro

vfs: spread struct mount - propagate_mnt()

2012-01-04T03:57:07Z

Signed-off-by: Al Viro

vfs: spread struct mount - get_dominating_id / do_make_slave

2012-01-04T03:57:06Z

next pile of horrors, similar to mnt_parent one; this time it's mnt_master. Signed-off-by: Al Viro

vfs: spread struct mount - work with counters

2012-01-04T03:57:05Z

Signed-off-by: Al Viro

vfs: spread struct mount - is_path_reachable

2012-01-04T03:57:04Z

Signed-off-by: Al Viro

vfs: spread struct mount - do_umount/propagate_mount_busy

2012-01-04T03:57:03Z

Signed-off-by: Al Viro

vfs: spread struct mount mnt_set_mountpoint child argument

2012-01-04T03:57:03Z

Signed-off-by: Al Viro