Daniel Borkmann 612bacad78 bpf, inode: disallow userns mounts ... Follow-up to commit e27f4a942a ("bpf: Use mount_nodev not mount_ns to mount the bpf filesystem"), which removes the FS_USERNS_MOUNT flag. The original idea was to have a per mountns instance instead of a single global fs instance, but that didn't work out and we had to switch to mount_nodev() model. The intent of that middle ground was that we avoid users who don't play nice to create endless instances of bpf fs which are difficult to control and discover from an admin point of view, but at the same time it would have allowed us to be more flexible with regard to namespaces. Therefore, since we now did the switch to mount_nodev() as a fix where individual instances are created, we also need to remove userns mount flag along with it to avoid running into mentioned situation. I don't expect any breakage at this early point in time with removing the flag and we can revisit this later should the requirement for this come up with future users. This and commit e27f4a942a have been split to facilitate tracking should any of them run into the unlikely case of causing a regression. Fixes: b2197755b2 ("bpf: add support for persistent maps/progs") Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org> Acked-by: Alexei Starovoitov <ast@kernel.org> Signed-off-by: David S. Miller <davem@davemloft.net>		2016-05-23 15:08:26 -07:00
..
Makefile	bpf: introduce percpu_freelist	2016-03-08 15:28:31 -05:00
arraymap.c	bpf: check for reserved flag bits in array and stack maps	2016-03-08 15:28:31 -05:00
core.c	bpf: rather use get_random_int for randomizations	2016-05-20 11:18:21 -07:00
hashtab.c	bpf: pre-allocate hash map elements	2016-03-08 15:28:31 -05:00
helpers.c	bpf: convert relevant helper args to ARG_PTR_TO_RAW_STACK	2016-04-14 21:40:41 -04:00
inode.c	bpf, inode: disallow userns mounts	2016-05-23 15:08:26 -07:00
percpu_freelist.c	bpf: introduce percpu_freelist	2016-03-08 15:28:31 -05:00
percpu_freelist.h	bpf: introduce percpu_freelist	2016-03-08 15:28:31 -05:00
stackmap.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2016-05-17 16:26:30 -07:00
syscall.c	bpf: prepare bpf_int_jit_compile/bpf_prog_select_runtime apis	2016-05-16 13:49:32 -04:00
verifier.c	bpf: teach verifier to recognize imm += ptr pattern	2016-05-20 19:53:03 -04:00