proc: subset=pid: Relax check of mount visibility
Get series with b4
b4 am [email protected]Versions newest first
- v6 Latest5 patches 11 repliesIn review
Changes in v6 from the cover letter
* Add documentation about procfs mount restrictions.
* Reorder commits for better review.
Patches in v6 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/5 | docs: proc: add documentation about mount restrictionsDocumentation/ | +14 | 0 replies | |
| 2/5 | proc: subset=pid: Show /proc/self/net only for CAP_NET_ADMINfs/ fs/ include/ | +14 | 0 replies | |
| 3/5 | proc: Disable cancellation of subset=pid optionfs/ | +10 | 0 replies | |
| 4/5 | proc: Relax check of mount visibilityfs/ fs/ include/ | +29 | 0 replies | |
| 5/5 | docs: proc: add documentation about relaxing visibility restrictionsDocumentation/ | +2 | 0 replies |
Reviews trailers per patch
None of the 5 patches has a Reviewed-by or Acked-by of their own; the series has one for all of them.
| Patch | Aleksa Sarai |
|---|---|
| Series | R-b |
| 1/5 | |
| 2/5 | |
| 3/5 | |
| 4/5 | |
| 5/5 |
Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.
Cover letter [RESEND PATCH v6 0/5] proc: subset=pid: Relax check of mount visibility
Allow to mount procfs with subset=pid option even if the entire procfs is not fully accessible to the mounter.
Changelog
---------
v6:
* Add documentation about procfs mount restrictions.
* Reorder commits for better review.
v4:
* Set SB_I_DYNAMIC only if pidonly is set.
* Add an error message if subset=pid is canceled during remount.
v3:
* Add 'const' to struct cred *mounter_cred (fix kernel test robot warning).
v2:
* cache the mounters credentials and make access to the net directories contingent of the permissions of the mounter of procfs.
--
Alexey Gladkov (5):
docs: proc: add documentation about mount restrictions
proc: subset=pid: Show /proc/self/net only for CAP_NET_ADMIN
proc: Disable cancellation of subset=pid option
proc: Relax check of mount visibility
docs: proc: add documentation about relaxing visibility restrictions
Documentation/filesystems/proc.rst | 15 +++++++++++++++ fs/namespace.c | 30 ++++++++++++++++++------------ fs/proc/proc_net.c | 8 ++++++++ fs/proc/root.c | 24 +++++++++++++++++++----- include/linux/fs.h | 1 + include/linux/proc_fs.h | 1 + 6 files changed, 62 insertions(+), 17 deletions(-)
Signature · 1 line
2.29.3