Re: [patch 7/8] allow unprivileged mounts

Jan Engelhardt
2007-04-21T15:43:28Z

On Apr 21 2007 08:10, Eric W. Biederman wrote:
>>
>>> Define a new fs flag FS_SAFE, which denotes, that unprivileged
>>> mounting of this filesystem may not constitute a security problem.
>>>
>>> Since most filesystems haven't been designed with unprivileged
>>> mounting in mind, a thorough audit is needed before setting this flag.
>>
>> Practically speaking, is there any realistic likelihood that any filesystem
>> apart from FUSE will ever use this?
>
>Also potentially some of the kernel virtual filesystems. /proc should
>be safe already. If you don't have any kind of backing store this problem
>gets easier.

tmpfs!

Jan
--