On 3/15/21 12:20 AM, Dmitry V. Levin wrote: > Hi Michael, > > On Sun, Mar 14, 2021 at 11:04:26PM +0100, Michael Kerrisk (man-pages) wrote: >> On Tue, 9 Mar 2021 at 16:00, Szunti <szunti@xxxxxxxxx> wrote: >>> >>> user_namespaces lists in Capabilities section the filesystems that can >>> be mount: >>> >>> Holding CAP_SYS_ADMIN within the user namespace that owns a process's >>> mount namespace allows that process to create bind mounts and mount the >>> following types of filesystems: >>> >>> * /proc (since Linux 3.8) >>> * /sys (since Linux 3.8) >>> * devpts (since Linux 3.9) >>> * tmpfs(5) (since Linux 3.9) >>> * ramfs (since Linux 3.9) >>> * mqueue (since Linux 3.9) >>> * bpf (since Linux 4.4) >>> >>> IUUC this list should add >>> * overlay (since Linux 5.11) > > It should rather say overlayfs. > >> Could you add some info about how you discovered/verified this please. >> >> That helps us check the details. > > What a coincidence, I just happen to have the relevant Linux kernel > merge commits cached: > 92dbc9dedccb9759c7f9f2f0ae6242396376988f aka v5.11-rc1~83 > 4cb2c00c43b3fe88b32f29df4f76da1b92c33224 aka v5.11-rc7~28 Thanks Dmitry nd Szunti. I've added overlayfs. Cheers, Michael -- Michael Kerrisk Linux man-pages maintainer; http://www.kernel.org/doc/man-pages/ Linux/UNIX System Programming Training: http://man7.org/training/
