From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-2.5 required=3.0 tests=HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,SPF_PASS,USER_AGENT_MUTT autolearn=unavailable autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id E757AC43381 for ; Wed, 13 Mar 2019 16:11:57 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id BD7AB206DF for ; Wed, 13 Mar 2019 16:11:57 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726724AbfCMQLv (ORCPT ); Wed, 13 Mar 2019 12:11:51 -0400 Received: from zeniv.linux.org.uk ([195.92.253.2]:60774 "EHLO ZenIV.linux.org.uk" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726011AbfCMQLv (ORCPT ); Wed, 13 Mar 2019 12:11:51 -0400 Received: from viro by ZenIV.linux.org.uk with local (Exim 4.92 #3 (Red Hat Linux)) id 1h46Ts-0000bl-2x; Wed, 13 Mar 2019 16:11:48 +0000 Date: Wed, 13 Mar 2019 16:11:48 +0000 From: Al Viro To: Eric Biggers Cc: Miklos Szeredi , Richard Weinberger , linux-fsdevel@vger.kernel.org, linux-fscrypt@vger.kernel.org, overlayfs , linux-kernel@vger.kernel.org Subject: Re: overlayfs vs. fscrypt Message-ID: <20190313161147.GS2217@ZenIV.linux.org.uk> References: <4603533.ZIfxmiEf7K@blindfold> <1852545.qrIQg0rEWx@blindfold> <1854703.ve7plDhYWt@blindfold> <20190313150126.GA703@sol.localdomain> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20190313150126.GA703@sol.localdomain> User-Agent: Mutt/1.10.1 (2018-07-13) Sender: linux-fsdevel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-fsdevel@vger.kernel.org On Wed, Mar 13, 2019 at 08:01:27AM -0700, Eric Biggers wrote: > What do you think about this? That fscrypt might have some very deep flaws. I'll need to RTFS and review its model, but what I've seen in this thread so far is not promising anything good. It's not just overlayfs - there are all kinds of interesting trouble possible just with fscrypt, unless I'm misparsing what had been said so far.