On Tue, Oct 18, 2022 at 12:17:24AM -0700, Kees Cook wrote: > Add some comments about what the fs counting is doing in > check_unsafe_exec() and how it relates to the call graph. > Specifically, we can't force an unshare of the fs because > of at least Chrome: > https://lore.kernel.org/lkml/86CE201B-5632-4BB7-BCF6-7CB2C2895409@xxxxxxxxxxxx/ > > Cc: Eric Biederman <ebiederm@xxxxxxxxxxxx> > Cc: linux-fsdevel@xxxxxxxxxxxxxxx > Signed-off-by: Kees Cook <keescook@xxxxxxxxxxxx> > --- Acked-by: Christian Brauner (Microsoft) <brauner@xxxxxxxxxx>