Originally from: Herbert Poetzl <herbert@xxxxxxxxxxxx> This is the core of the read-only bind mount patch set. Note that this does _not_ add a "ro" option directly to the bind mount operation. If you require such a mount, you must first do the bind, then follow it up with a 'mount -o remount,ro' operation. Signed-off-by: Dave Hansen <haveblue@xxxxxxxxxx> --- lxc-dave/fs/namespace.c | 40 ++++++++++++++++++++++++++++++++++------ lxc-dave/include/linux/mount.h | 7 ++++++- 2 files changed, 40 insertions(+), 7 deletions(-) diff -puN fs/namespace.c~23-24-honor-r-w-changes-at-do-remount-time fs/namespace.c --- lxc/fs/namespace.c~23-24-honor-r-w-changes-at-do-remount-time 2007-06-22 10:14:19.000000000 -0700 +++ lxc-dave/fs/namespace.c 2007-06-22 10:14:19.000000000 -0700 @@ -201,7 +201,7 @@ void mnt_drop_write(struct vfsmount *mnt } EXPORT_SYMBOL_GPL(mnt_drop_write); -int mnt_make_readonly(struct vfsmount *mnt) +static int mnt_make_readonly(struct vfsmount *mnt) { int ret = 0; @@ -214,15 +214,21 @@ int mnt_make_readonly(struct vfsmount *m goto out; } /* - * actually set mount's r/o flag here to make - * __mnt_is_readonly() true, which keeps anyone - * from doing a successful mnt_want_write(). + * nobody can do a successful mnt_want_write() with all + * of the counts in MNT_DENIED_WRITE and the locks held. */ + if (!ret) + mnt->mnt_flags |= MNT_READONLY; out: mnt_unlock_cpus(); return ret; } +static void __mnt_unmake_readonly(struct vfsmount *mnt) +{ + mnt->mnt_flags &= ~MNT_READONLY; +} + int simple_set_mnt(struct vfsmount *mnt, struct super_block *sb) { mnt->mnt_sb = sb; @@ -524,7 +530,7 @@ static int show_vfsmnt(struct seq_file * seq_path(m, mnt, mnt->mnt_root, " \t\n\\"); seq_putc(m, ' '); mangle(m, mnt->mnt_sb->s_type->name); - seq_puts(m, mnt->mnt_sb->s_flags & MS_RDONLY ? " ro" : " rw"); + seq_puts(m, __mnt_is_readonly(mnt) ? " ro" : " rw"); for (fs_infop = fs_info; fs_infop->flag; fs_infop++) { if (mnt->mnt_sb->s_flags & fs_infop->flag) seq_puts(m, fs_infop->str); @@ -1093,6 +1099,23 @@ out: return err; } +static int change_mount_flags(struct vfsmount *mnt, int ms_flags) +{ + int error = 0; + int readonly_request = 0; + + if (ms_flags & MS_RDONLY) + readonly_request = 1; + if (readonly_request == __mnt_is_readonly(mnt)) + return 0; + + if (readonly_request) + error = mnt_make_readonly(mnt); + else + __mnt_unmake_readonly(mnt); + return error; +} + /* * change filesystem flags. dir should be a physical root of filesystem. * If you've mounted a non-root directory somewhere and want to do remount @@ -1114,7 +1137,10 @@ static int do_remount(struct nameidata * return -EINVAL; down_write(&sb->s_umount); - err = do_remount_sb(sb, flags, data, 0); + if (flags & MS_BIND) + err = change_mount_flags(nd->mnt, flags); + else + err = do_remount_sb(sb, flags, data, 0); if (!err) nd->mnt->mnt_flags = mnt_flags; up_write(&sb->s_umount); @@ -1558,6 +1584,8 @@ long do_mount(char *dev_name, char *dir_ mnt_flags |= MNT_NODIRATIME; if (flags & MS_RELATIME) mnt_flags |= MNT_RELATIME; + if (flags & MS_RDONLY) + mnt_flags |= MNT_READONLY; flags &= ~(MS_NOSUID | MS_NOEXEC | MS_NODEV | MS_ACTIVE | MS_NOATIME | MS_NODIRATIME | MS_RELATIME); diff -puN include/linux/mount.h~23-24-honor-r-w-changes-at-do-remount-time include/linux/mount.h --- lxc/include/linux/mount.h~23-24-honor-r-w-changes-at-do-remount-time 2007-06-22 10:14:19.000000000 -0700 +++ lxc-dave/include/linux/mount.h 2007-06-22 10:14:19.000000000 -0700 @@ -29,6 +29,7 @@ struct mnt_namespace; #define MNT_NOATIME 0x08 #define MNT_NODIRATIME 0x10 #define MNT_RELATIME 0x20 +#define MNT_READONLY 0x40 /* does the user want this to be r/o? */ #define MNT_SHRINKABLE 0x100 @@ -87,7 +88,11 @@ static inline struct vfsmount *mntget(st */ static inline int __mnt_is_readonly(struct vfsmount *mnt) { - return (mnt->mnt_sb->s_flags & MS_RDONLY); + if (mnt->mnt_flags & MNT_READONLY) + return 1; + if (mnt->mnt_sb->s_flags & MS_RDONLY) + return 1; + return 0; } extern int mnt_want_write(struct vfsmount *mnt); _ - To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html