Hi - I'm wondering how the following can be achieved using bindfs.
An important note to what follows, I have unshare setuid:
$ ls -la /usr/bin/unshare
-rwsr-xr-x 1 root root 10432 Jun 12 2013 /usr/bin/unshare
All of the commands that follow are run as an unprivileged user.
In terminal 1:
$ unshare -m /bin/bash
$ sudo mount -n --bind /home/myitcv/a /home/myitcv/xyz
$ ls /home/myitcv/xyz
aaaa.txt
In another terminal, terminal 2:
$ unshare -m /bin/bash
$ sudo mount -n --bind /home/myitcv/b /home/myitcv/xyz
$ ls /home/myitcv/xyz
bbbb.txt
If I try something similar with bindfs I get the following.
Terminal 1's commands succeed:
$ unshare -m /bin/bash
$ bindfs -ono-allow-other /home/myitcv/a /home/myitcv/xyz
$ ls /home/myitcv/xyz
aaaa.txt
But then in terminal 2:
$ unshare -m /bin/bash
$ bindfs -ono-allow-other /home/myitcv/b /home/myitcv/xyz
fusermount: failed to access mountpoint /home/myitcv/gostuff: Permission denied
I think this may be related to the fact that the mount that succeeded in terminal 1 is visible to both, despite the call to unshare:
$ cat /proc/$$/mounts | grep bindfs
bindfs /home/myitcv/xyz fuse.bindfs rw,nosuid,nodev,relatime,user_id=1000,group_id=1000,default_permissions 0 0
Am I doing something wrong here?
Is there an option equivalent to the -n on mount -n whereby the mount is created without writing to /etc/mtab?
Thanks
Hi - I'm wondering how the following can be achieved using
bindfs.An important note to what follows, I have
unsharesetuid:All of the commands that follow are run as an unprivileged user.
In terminal 1:
In another terminal, terminal 2:
If I try something similar with
bindfsI get the following.Terminal 1's commands succeed:
But then in terminal 2:
I think this may be related to the fact that the mount that succeeded in terminal 1 is visible to both, despite the call to
unshare:Am I doing something wrong here?
Is there an option equivalent to the
-nonmount -nwhereby the mount is created without writing to/etc/mtab?Thanks