> > Given the existence of shared subtrees allowing/denying this at the > > mount > > namespace level is silly and wrong. > > > > If we need more than just the filesystem permission checks can we > > make it a mount flag settable with mount and remount that allows > > non-privileged users the ability to create mount points under it > > in directories they have full read/write access to. > > Also for bind-mount and remount operations the flag has to be propagated > down its propagation tree. Otherwise a unpriviledged mount in a shared > mount wont get reflected in its peers and slaves, leading to unidentical > shared-subtrees. That's an interesting question. Do we want shared mounts to be totally identical, including mnt_flags? It doesn't look as if do_remount() guarantees that currently. Miklos _______________________________________________ Containers mailing list Containers@xxxxxxxxxxxxxxxxxxxxxxxxxx https://lists.linux-foundation.org/mailman/listinfo/containers
