Messages in this thread | | | From | Linus Torvalds <> | Date | Tue, 4 Oct 2022 13:55:17 -0700 | Subject | Re: [GIT PULL] LSM patches for v6.1 |
| |
On Tue, Oct 4, 2022 at 1:37 PM Eric W. Biederman <ebiederm@xmission.com> wrote: > > Please don't pull the user namespace bits of this code.
Eric, already done.
And I think you are in denial about how many problems the user-namespace stuff has caused.
Distros are literally turning it off entirely because the whole "let users create their own namespace" has *NOT* been a great success.
I personally think it was a mistake. We're stuck with it, but we most definitely need knobs to manage it that isn't just "enable/disable USER_NS" in the kernel config.
So this whole "don't do this" approach you have is not acceptable.
99% of all code does NOT WANT the user namespace thing, and it's been a big new attack surface for the kernel getting things subtly wrong.
I do not understand your "people need to be able to do this with no controls", when the alternative is to literally turn it off ENTIRELY.
I'm not saying that an LSM is the only place to do it, but I don't think there have been any better suggestions either.
Put another way: your "no limits are acceptable" is simply not realistic, and you haven't given any sane alternatives that I am aware of. No way to say "sure, let trusted system apps create their namespaces, but not random things".
Linus
| |