lkml.org 
[lkml]   [2015]   [Nov]   [18]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH v3 0/7] User namespace mount updates
    On Wed, Nov 18, 2015 at 08:22:38AM -0600, Seth Forshee wrote:

    > But it still requires the admin set it up that way, no? And aren't
    > privileges required to set up those devices in the first place?
    >
    > I'm not saying that it wouldn't be a good idea to lock down the backing
    > stores for those types of devices too, just that it isn't something that
    > a regular user could exploit without an admin doing something to
    > facilitate it.

    Sigh... If it boils down to "all admins within all containers must be
    trusted not to try and break out" (along with "roothole in any container
    escalates to kernel-mode code execution on host"), then what the fuck
    is the *point* of bothering with containers, userns, etc. in the first
    place? If your model is basically "you want isolation, just use kvm",
    fine, but where's the place for userns in all that?

    And if you are talking about the _host_ admin, then WTF not have him just
    mount what's needed as part of setup and to hell with mounting those
    inside the container?

    Look at that from the hosting company POV - they are offering a bunch of
    virtual machines on one physical system. And you want the admins on those
    virtual machines independent from the host admin. Fine, but then you
    really need to keep them unable to screw each other or gain kernel-mode
    execution on the host.

    Again, what's the point of all that? I assumed the model where containers
    do, you know, contain what's in them, regardless of trust. You guys seem
    to assume something different and I really wonder what it _is_...


    \
     
     \ /
      Last update: 2015-11-18 16:21    [W:2.150 / U:0.388 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site