On Tue, Jan 26, 2016 at 09:38:34AM +0100, thus spake Ignacy Gawedzki: > Add alternate lookup_one_len_check function to fs/namei.c which does > what lookup_one_len did until now with a boolean argument telling > whether to check that the base directory is traversable. Modify > original lookup_one_len function to call the former with true as the > last argument. > > In function ovl_lookup_real, file fs/overlayfs/super.c, call > lookup_one_len_check with false as the last argument, so that failure > to traverse the base directory does not return -EACCES. This should > make lookup resolution work properly in the following setup > > drwxr-xr-x lower/ > drwx------ lower/foo/ > drw-r--r-- lower/boo/bar > drwxr-xr-x upper/ > drwxr-xr-x upper/foo/ > > when any user not being the owner of lower/foo is trying to access > foo/bar in the mounted overlay. Hi everyone, Please forgive my insisting, but I'm really looking forward to seeing some confirmation that this is the right way to go. Could someone take a look at this patch and confirm this is not going to wreak havoc? Thanks. Ignacy -- Ignacy Gawędzki R&D Engineer Green Communications -- To unsubscribe from this list: send the line "unsubscribe linux-unionfs" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html