mirror_zfs/module
Wolfgang Bumiller 0e85048f53 Take user namespaces into account in policy checks
Change file related checks to use user namespaces and make
sure involved uids/gids are mappable in the current
namespace.

Note that checks without file ownership information will
still not take user namespaces into account, as some of
these should be handled via 'zfs allow' (otherwise root in a
user namespace could issue commands such as `zpool export`).

This also adds an initial user namespace regression test
for the setgid bit loss, with a user_ns_exec helper usable
in further tests.

Additionally, configure checks for the required user
namespace related features are added for:
  * ns_capable
  * kuid/kgid_has_mapping()
  * user_ns in cred_t

Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov>
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
Closes #6800 
Closes #7270
2018-03-07 15:40:42 -08:00
..
avl Support -fsanitize=address with --enable-asan 2018-01-10 10:49:27 -08:00
icp Change movaps to movups in AES-NI code 2018-01-31 15:17:56 -08:00
lua OpenZFS 9035 - zfs: this statement may fall through 2018-02-21 14:55:34 -08:00
nvpair Support -fsanitize=address with --enable-asan 2018-01-10 10:49:27 -08:00
unicode Support -fsanitize=address with --enable-asan 2018-01-10 10:49:27 -08:00
zcommon Project Quota on ZFS 2018-02-13 14:54:54 -08:00
zfs Take user namespaces into account in policy checks 2018-03-07 15:40:42 -08:00
.gitignore Improve gitignore 2017-05-25 10:14:13 -07:00
Makefile.in OpenZFS 7431 - ZFS Channel Programs 2018-02-08 15:28:18 -08:00