• E
    mnt: fs_fully_visible enforce noexec and nosuid if !SB_I_NOEXEC · 77b1a97d
    Eric W. Biederman 提交于
    The filesystems proc and sysfs do not have executable files do not
    have exectuable files today and portions of userspace break if we do
    enforce nosuid and noexec consistency of nosuid and noexec flags
    between previous mounts and new mounts of proc and sysfs.
    
    Add the code to enforce consistency of the nosuid and noexec flags,
    and use the presence of SB_I_NOEXEC to signal that there is no need to
    bother.
    
    This results in a completely userspace invisible change that makes it
    clear fs_fully_visible can only skip the enforcement of noexec and
    nosuid because it is known the filesystems in question do not support
    executables.
    Signed-off-by: N"Eric W. Biederman" <ebiederm@xmission.com>
    77b1a97d
namespace.c 80.9 KB