[Bug 215797] fs/fuse : allow_other & allow_root not restricted to root

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Thu Jan 5 14:35:47 UTC 2017


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=215797

            Bug ID: 215797
           Summary: fs/fuse : allow_other & allow_root not restricted to
                    root
           Product: Base System
           Version: CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: kern
          Assignee: freebsd-bugs at FreeBSD.org
          Reporter: ben.rubson at gmail.com

Hello,

>From Linux mount.fuse(8) :
CONFIGURATION
  Some options regarding mount policy can be set in /etc/fuse.conf :
    user_allow_other
      Allow non-root users to specify allow_other or allow_root options 

>From FreeBSD mount_fusefs(8) :
allow_other
  Do not apply STRICT ACCESS POLICY. Only root can use this option.

I would like to see the Linux behaviour under FreeBSD, being able to allow
non-root users to use allow_other/allow_root option.

I then also think that it could be interesting to support allow_root :
allow_root
  This option is similar to allow_other but file access is limited to the user
mounting the filesystem and root. This option and allow_other are mutually
exclusive.

I need Fuse FS mounted by non-root users to be available to root (at least the
very first dir).
I then use this dirty quick tweak :

--- sys/fs/fuse/fuse_internal.c.orig
+++ sys/fs/fuse/fuse_internal.c
@@ -142,7 +142,7 @@
                        int denied = fuse_match_cred(data->daemoncred,
                            cred);

-                       if (denied) {
+                       if (denied && (cred->cr_uid)) {
                                return EPERM;
                        }
                }

Would then be nice to be officially supported.

Many thanks !

Ben

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-bugs mailing list