Aleksa Sarai 669f4dbef8 configs: validate: add validation for bind-mount fsflags ...

Bind-mounts cannot have any filesystem-specific "data" arguments,
because the kernel ignores the data argument for MS_BIND and
MS_BIND|MS_REMOUNT and we cannot safely try to override the flags
because those would affect mounts on the host (these flags affect the
superblock).

It should be noted that there are cases where the filesystem-specified
flags will also be ignored for non-bind-mounts but those are kernel
quirks and there's no real way for us to work around them. And users
wouldn't get any real benefit from us adding guardrails to existing
kernel behaviour.

Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>

2023-11-02 07:50:03 +11:00

..

rootless_test.go

Capitalize [UG]idMappings as [UG]IDMappings

2023-07-21 13:55:34 +02:00

rootless.go

Capitalize [UG]idMappings as [UG]IDMappings

2023-07-21 13:55:34 +02:00

validator_test.go

configs: validate: add validation for bind-mount fsflags

2023-11-02 07:50:03 +11:00

validator.go

configs: validate: add validation for bind-mount fsflags

2023-11-02 07:50:03 +11:00