Messages in this thread | | | From | Colin Walters <> | Subject | Re: [PATCH v3 0/7] User namespace mount updates | Date | Thu, 19 Nov 2015 09:37:53 -0500 |
| |
On Thu, Nov 19, 2015, at 02:53 AM, Richard Weinberger wrote:
> Erm, I don't want this in the kernel. That's why I've proposed the lklfuse approach.
I already said this before but just to repeat, since I'm confused:
How would "lklfuse" be different from http://libguestfs.org/ which we at Red Hat (and a number of other organizations) use quite widely now for build systems, debugging etc.
In the end it's just running the kernel in KVM with a custom protocol, with support for non-filesystem things like "install a bootloader", and it already supports FUSE.
I'm pretty firmly with Al here - the attack surface increase here is too great, and we'd likely turn this off if it even did make it into the kernel.
| |