Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 05 Jan 2017 14:35:47 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-bugs@FreeBSD.org
Subject:   [Bug 215797] fs/fuse : allow_other & allow_root not restricted to root
Message-ID:  <bug-215797-8@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D215797

            Bug ID: 215797
           Summary: fs/fuse : allow_other & allow_root not restricted to
                    root
           Product: Base System
           Version: CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: kern
          Assignee: freebsd-bugs@FreeBSD.org
          Reporter: ben.rubson@gmail.com

Hello,

>From Linux mount.fuse(8) :
CONFIGURATION
  Some options regarding mount policy can be set in /etc/fuse.conf :
    user_allow_other
      Allow non-root users to specify allow_other or allow_root options=20

>From FreeBSD mount_fusefs(8) :
allow_other
  Do not apply STRICT ACCESS POLICY. Only root can use this option.

I would like to see the Linux behaviour under FreeBSD, being able to allow
non-root users to use allow_other/allow_root option.

I then also think that it could be interesting to support allow_root :
allow_root
  This option is similar to allow_other but file access is limited to the u=
ser
mounting the filesystem and root. This option and allow_other are mutually
exclusive.

I need Fuse FS mounted by non-root users to be available to root (at least =
the
very first dir).
I then use this dirty quick tweak :

--- sys/fs/fuse/fuse_internal.c.orig
+++ sys/fs/fuse/fuse_internal.c
@@ -142,7 +142,7 @@
                        int denied =3D fuse_match_cred(data->daemoncred,
                            cred);

-                       if (denied) {
+                       if (denied && (cred->cr_uid)) {
                                return EPERM;
                        }
                }

Would then be nice to be officially supported.

Many thanks !

Ben

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-215797-8>