Skip to contentSkip to conversation

overlayfs: DAC override capability for ovl_lookup_real(lowerdir)?

DISCUSSION Nazarov Sergey 1 participant 1 message Feb 19, 2016

lore
Share & tools
lore
#0 lore raw

Hi! The problem is:
if lower directory contains subdirectory foo with permissions 0700 root.root, upper directory contains same subdirectory with permissions 0700 user.user, user can't create files in unioned one (EACCES error).
May be ovl_lookup_real for lowerdir need to have DAC_READ_SEARCH capability?