26.02.2016, 22:41, "Vivek Goyal" <vgoyal@xxxxxxxxxx>: > > So what's the problem we are trying to solve. Why should we able to > override the DAC checks of lower layer if same directory in upper > is searchable for user but it is not searchable in lower layer. > If I right, this is a one of the main feature of overlayfs - upper layer has priority over lower ones. Override AC checks necessary for lookup operation only. Lower layer files access AC checks remain, so this should not be a security problem. Sergey. -- To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
