Commits on Nov 1, 2023

1. configs: validate: add validation for bind-mount fsflags …

   Bind-mounts cannot have any filesystem-specific "data" arguments,
   because the kernel ignores the data argument for MS_BIND and
   MS_BIND|MS_REMOUNT and we cannot safely try to override the flags
   because those would affect mounts on the host (these flags affect the
   superblock).
   
   It should be noted that there are cases where the filesystem-specified
   flags will also be ignored for non-bind-mounts but those are kernel
   quirks and there's no real way for us to work around them. And users
   wouldn't get any real benefit from us adding guardrails to existing
   kernel behaviour.
   
   Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>

   

   cyphar committed Nov 1, 2023
   Configuration menu

   • View commit details
   • Copy full SHA for 669f4db
   • Browse repository at this point

   Copy the full SHA

   669f4db View commit details

   Browse the repository at this point in the history