I'm proposing that "unshare -m" should not be a privileged option,
because in practice it is IMO used like this:
unshare -m /bin/bash
now user can do his mounts (mostly via sudo)
The user should need the root permission (or CAP_ADMIN or whatever
caps it needs) only for the mount and unmount cmds, but not for "unshare -m".
Therefore the -m option (and maybe even most of the other options) of unshare
should be made to work for users, without needing root permission.
Maybe even better would be to define the users in a new conf file
/etc/unshare.conf or so.
The other solution via user namespace is IMHO overkill and in my case
impractical and irritating because user gets a root-prompt (#)
eventhough it is only inside the user namespace.
I like "unshare -m", but it should work also for unprivileged users without
needing sudo.
As said in previous postings of mine: "chmod u+s unshare" does what I need,
but I don't know if that solution will continue working in newer versions.
...just my .02 cents from the field as admin and user
--
To unsubscribe from this list: send the line "unsubscribe util-linux" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
