From: Alejandro Colomar <alx@kernel.org>
To: Grayson Tinker <graysontinker@gmail.com>
Cc: linux-man@vger.kernel.org
Subject: Re: [PATCH] man/man5/tmpfs.5: Specify that noswap may not be used within unprivileged user namespaces
Date: Fri, 23 Oct 2026 19:58:09 +0200 [thread overview]
Message-ID: <atugHtuGg_6gLck_@debian> (raw)
In-Reply-To: <20261020015112.127389-1-graysontinker@gmail.com>
[-- Attachment #1: Type: text/plain, Size: 1400 bytes --]
Hi Grayson,
> Date: 2026-10-19 19:51:12-0600
> From: Grayson Tinker <graysontinker@gmail.com>
>
> Since the tmpfs noswap option was added, the kernel has disallowed its use while
> within an unprivileged user namespace for security reasons. Document this restriction
> so users do not believe noswap to be available in every situation.
>
> ref. linux.git 01106e140835ff94fdef79d66f166b87b0c89824 ("shmem: restrict noswap option to initial user namespace")
>
> Signed-off-by: Grayson Tinker <graysontinker@gmail.com>
Thanks! I've applied the patch.
Have a lovely night!
Alex
> ---
> man/man5/tmpfs.5 | 4 ++++
> 1 file changed, 4 insertions(+)
>
> diff --git a/man/man5/tmpfs.5 b/man/man5/tmpfs.5
> index 10acbdcfa..a904db2c8 100644
> --- a/man/man5/tmpfs.5
> +++ b/man/man5/tmpfs.5
> @@ -109,6 +109,10 @@ but not a % suffix.
> Disables swap.
> Remounts must respect the original settings.
> By default swap is enabled.
> +.IP
> +.\" commit 01106e140835ff94fdef79d66f166b87b0c89824
> +.B noswap
> +is not available while within an unprivileged user namespace.
> .TP
> .BR mode =\f[I]mode\f[]
> Set initial permissions of the root directory.
>
> Range-diff:
> -: --------- > 1: b3b2becca man/man5/tmpfs.5: Specify that noswap may not be used within unprivileged user namespaces
> --
> 2.55.0
>
--
<https://www.alejandro-colomar.es>
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]
prev parent reply other threads:[~2026-10-23 17:58 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-10-20 1:51 [PATCH] man/man5/tmpfs.5: Specify that noswap may not be used within unprivileged user namespaces Grayson Tinker
2026-10-23 17:58 ` Alejandro Colomar [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=atugHtuGg_6gLck_@debian \
--to=alx@kernel.org \
--cc=graysontinker@gmail.com \
--cc=linux-man@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.