Messages in this thread | | | From | Nazarov Sergey <> | Subject | Re: [PATCH v2 1/1] OverlayFS: Fix checking permissions during lookup. | Date | Sat, 27 Feb 2016 13:40:02 +0300 |
| |
26.02.2016, 22:41, "Vivek Goyal" <vgoyal@redhat.com>: > > So what's the problem we are trying to solve. Why should we able to > override the DAC checks of lower layer if same directory in upper > is searchable for user but it is not searchable in lower layer. >
If I right, this is a one of the main feature of overlayfs - upper layer has priority over lower ones. Override AC checks necessary for lookup operation only. Lower layer files access AC checks remain, so this should not be a security problem. Sergey.
| |