Re: [RCF] [PATCH] unprivileged mount/umount

Jamie Lokier
2005-05-11T21:32:52Z

Miklos Szeredi wrote:
> > I don't see the purpose of current->namespace and the associated mount
> > restrictions at all. I asked Al Viro what it's for, but haven't seen
> > a reply :( IMHO current->namespace should simply be removed, because the
> > "current namespace" is represented just fine by
> > current->fs->rootmnt->mnt_namespace.
>
> I'll look at what it would take to remove current->namespace.

The security implications don't seem to be important. If you don't
want someone to access a namespace, then don't make it accessible.

But knowing Al it might exist for some subtle locking reason. Be sure
to study the locking carefully :)

-- Jamie