Hi Michael, On Sun, Mar 14, 2021 at 11:04:26PM +0100, Michael Kerrisk (man-pages) wrote: > On Tue, 9 Mar 2021 at 16:00, Szunti <szunti@xxxxxxxxx> wrote: > > > > user_namespaces lists in Capabilities section the filesystems that can > > be mount: > > > > Holding CAP_SYS_ADMIN within the user namespace that owns a process's > > mount namespace allows that process to create bind mounts and mount the > > following types of filesystems: > > > > * /proc (since Linux 3.8) > > * /sys (since Linux 3.8) > > * devpts (since Linux 3.9) > > * tmpfs(5) (since Linux 3.9) > > * ramfs (since Linux 3.9) > > * mqueue (since Linux 3.9) > > * bpf (since Linux 4.4) > > > > IUUC this list should add > > * overlay (since Linux 5.11) It should rather say overlayfs. > Could you add some info about how you discovered/verified this please. > > That helps us check the details. What a coincidence, I just happen to have the relevant Linux kernel merge commits cached: 92dbc9dedccb9759c7f9f2f0ae6242396376988f aka v5.11-rc1~83 4cb2c00c43b3fe88b32f29df4f76da1b92c33224 aka v5.11-rc7~28 -- ldv