On Thu, Apr 23, 2020 at 10:06 AM JeffleXu <jefflexu@xxxxxxxxxxxxxxxxx> wrote: > > It seems that MS_NOSEC flag would be problematic for network filesystems. > > > @Amir, would you please give some suggestions on if this would break the > > permission control down when 'NFS export' feature enabled ? > I cannot think of anything specific to NFS export. I think you are confusing NFS server with NFS client permissions. I think network filesystems do not set SB_NOSEC, because client may not have an coherent state of the xattr on server and other clients. To reflect on overlayfs, I think overlayfs should inherit the SB_NOSEC flag from upper fs, which is most likelihood will be set. The only filesystem I can think of that is used for upper fs without SB_NOSEC is the recent feature of fuse as upper fs merged to v5.7-rc1. Thanks, Amir.
