ACK/cmnt: [PATCH v3 0/3][Xenial SRU] Fix docker permission issues with the overlay2 storage driver
Stefan Bader
stefan.bader at canonical.com
Wed Feb 1 08:52:07 UTC 2017
On 01.02.2017 00:00, Seth Forshee wrote:
> BugLink: http://bugs.launchpad.net/bugs/1659417
>
> Under some conditions docker users who use the overlay2 storage driver
> on xenial are seeing erroneous "permission denied" errors. The upstream
> fix has a somewhat complicated history due to the evolution of the vfs
> lookup code. This series backports the patch representing the current
> state of the code, with some cleanup preceding it to make the backport
> simpler.
I like that much better. The cleanup looks to make things simpler and in the end
this makes the whole thing more like the HEAD of upstream. Which will also help
in future when there might be security related fixes.
-Stefan
>
> Thanks,
> Seth
>
> Miklos Szeredi (1):
> ovl: check mounter creds on underlying lookup
>
> Seth Forshee (2):
> UBUNTU: SAUCE: overlayfs: Replace ovl_prepare_creds() with
> ovl_override_creds()
> Revert "UBUNTU: SAUCE: cred: Add clone_cred() interface"
>
> fs/overlayfs/copy_up.c | 9 +------
> fs/overlayfs/dir.c | 38 ++++-----------------------
> fs/overlayfs/overlayfs.h | 2 +-
> fs/overlayfs/readdir.c | 7 +----
> fs/overlayfs/super.c | 29 +++++++--------------
> include/linux/cred.h | 1 -
> kernel/cred.c | 68 ++++++++++++++++--------------------------------
> 7 files changed, 40 insertions(+), 114 deletions(-)
>
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20170201/23ef8eba/attachment.sig>
More information about the kernel-team
mailing list