github-mirror/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-11-09 13:44:03 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity Graph

namespace: nothing is mounted on or written through knullfs

Browse Source 
Mark the root of knullfs with dont_mount(). Nothing is ever mounted on
the root of a kernel thread and the following patches make that root
reachable from userspace, so say it on the dentry where it doesn't
depend on the mount being in no namespace. Let do_lock_mount() refuse
such a target before it takes the inode lock and namespace_sem. The
flag is sticky so the check needs no lock. The one under the locks
stays for a mountpoint that is being removed.

Make the mount read-only as well. Its one inode is immutable so nothing
could be changed through it anyway, but MNT_READONLY makes that visible
the usual way: EROFS instead of EPERM and ST_RDONLY in statvfs().

Link: https://patch.msgid.link/20261002-work-mount-fixes-4-v1-15-dd44b89d44ce@kernel.org
Signed-off-by: Christian Brauner (Amutable) <brauner@kernel.org>
This commit is contained in:
Christian Brauner 2026-10-02 15:52:46 +02:00
parent 4209cd7f54
commit e22e69c2ad
No known key found for this signature in database
GPG Key ID: 91C61BC06578DCA2
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
fs/namespace.c
View File

@ -2814,6 +2814,11 @@ static void do_lock_mount(const struct path *path,
scoped_guard(mount_locked_reader) {
m = where_to_mount(path, &dentry, beneath);
/* sticky, so it takes no locks to refuse it */
if (unlikely(cant_mount(dentry))) {
res->parent = ERR_PTR(-ENOENT);
return;
}
if (&m->mnt != path->mnt) {
mntget(&m->mnt);
dget(dentry);
@ -6374,6 +6379,10 @@ static void __init init_mount_tree(void)
knullfs = kern_mount(&nullfs_fs_type);
if (IS_ERR(knullfs))
panic("VFS: Failed to create private nullfs instance");
/* nothing is ever mounted on the root of a kernel thread */
dont_mount(knullfs->mnt_root);
/* and nothing is ever written through it */
knullfs->mnt_flags |= MNT_READONLY;
root.mnt = knullfs;
root.dentry = knullfs->mnt_root;