[Virtio-fs] [PATCH v2 0/5] virtiofsd: Add a unprivileged passthrough mode
Vivek Goyal
vgoyal at redhat.com
Thu Jul 30 19:47:31 UTC 2020
Hi,
This is V2 of patches. Only change since last version is handling of
lock/pid file creation as per the comments from Daniel Berrange.
I can't think of any more changes needed. As a unpriviliged user
inside VM I can do simple operations like create/remove/read/write
files.
For more testing, I probably need a testsuite which runs as unpriviliged
user. pjdfstests needs to run as root and this does not work in this
setup as creation of files as root fails. (On host, daemon tries to
switch to root uid and that fails).
So as of now, I think these are the minimum changes needed to support
unprivileged passthrough mode of virtiofsd.
Thanks
Vivek
Vivek Goyal (5):
virtiofsd: Add notion of unprivileged mode
virtiofsd: create lock/pid file in per user cache dir
virtiofsd: open /proc/self/fd/ in sandbox=NONE mode
virtiofsd: Open lo->source while setting up root in sandbox=NONE mode
virtiofsd: Skip setup_capabilities() in sandbox=NONE mode
tools/virtiofsd/fuse_virtio.c | 15 ++++++++++++++-
tools/virtiofsd/passthrough_ll.c | 29 ++++++++++++++++++++++++++---
2 files changed, 40 insertions(+), 4 deletions(-)
--
2.25.4
More information about the Virtio-fs
mailing list