• Linus Torvalds's avatar
    Merge tag 'fs.idmapped.fixes.v6.0-rc3' of... · d3cd67d6
    Linus Torvalds authored
    Merge tag 'fs.idmapped.fixes.v6.0-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/idmapping
    
    Pull idmapping fixes from Christian Brauner:
    
     - Since Seth joined as co-maintainer for idmapped mounts we decided to
       use a shared git tree. Konstantin suggested we use vfs/idmapping.git
       on kernel.org under the vfs/ namespace. So this updates the tree in
       the maintainers file.
    
     - Ensure that POSIX ACLs checking, getting, and setting works correctly
       for filesystems mountable with a filesystem idmapping that want to
       support idmapped mounts.
    
       Since no filesystems mountable with an fs_idmapping do yet support
       idmapped mounts there is no problem. But this could change in the
       future, so add a check to refuse to create idmapped mounts when the
       mounter is not privileged over the mount's idmapping.
    
     - Check that caller is privileged over the idmapping that will be
       attached to a mount.
    
       Currently no FS_USERNS_MOUNT filesystems support idmapped mounts,
       thus this is not a problem as only CAP_SYS_ADMIN in init_user_ns is
       allowed to set up idmapped mounts. But this could change in the
       future, so add a check to refuse to create idmapped mounts when the
       mounter is not privileged over the mount's idmapping.
    
     - Fix POSIX ACLs for ntfs3. While looking at our current POSIX ACL
       handling in the context of some overlayfs work I went through a range
       of other filesystems checking how they handle them currently and
       encountered a few bugs in ntfs3.
    
       I've sent this some time ago and the fixes haven't been picked up
       even though the pull request for other ntfs3 fixes got sent after.
       This should really be fixed as right now POSIX ACLs are broken in
       certain circumstances for ntfs3.
    
    * tag 'fs.idmapped.fixes.v6.0-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/idmapping:
      ntfs: fix acl handling
      fs: require CAP_SYS_ADMIN in target namespace for idmapped mounts
      MAINTAINERS: update idmapping tree
      acl: handle idmapped mounts for idmapped filesystems
    d3cd67d6
xattr.c 23.3 KB