Re: unprivileged mounts git tree

Miklos Szeredi
2008-09-11T14:45:00Z

On Thu, 11 Sep 2008, ebiederm@xmission.com (Eric W. Biederman)
> There is a weird corner case I'm trying to wrap my head around.
> unlink and rmdir do not work on dentries that are mount points
> in another mount namespace.
>
> Which is at least needed for the moment so we don't leak mounts.
>
> Once we have unprivileged mounts does that introduce a DOS attack?

Hmm, yes. That's a tough one...

I think if the dentry has only user mounts, unlink should go ahead and
on success dissolve any mounts on the dentry. Does that sound
workable?

Thanks,
Miklos