]> git.apps.os.sepia.ceph.com Git - xfsprogs-dev.git/commit
xfs_scrub: allow auxiliary pathnames for sandboxing
authorDarrick J. Wong <djwong@kernel.org>
Mon, 29 Jul 2024 23:23:14 +0000 (16:23 -0700)
committerDarrick J. Wong <djwong@kernel.org>
Tue, 30 Jul 2024 00:01:09 +0000 (17:01 -0700)
commit18104b318ca9b3bb13dc901371272b46e1fb2669
tree8129da1961b6f5cb3df308ad050c39c2e76947f6
parent34bed605490f936c3ead49e2e1cad78505260461
xfs_scrub: allow auxiliary pathnames for sandboxing

In the next patch, we'll tighten up the security on the xfs_scrub
service so that it can't escape.  However, sandboxing the service
involves making the host filesystem as inaccessible as possible, with
the filesystem to scrub bind mounted onto a known location within the
sandbox.  Hence we need one path for reporting and a new -M argument to
tell scrub what it should actually be trying to open.

Signed-off-by: Darrick J. Wong <djwong@kernel.org>
Reviewed-by: Christoph Hellwig <hch@lst.de>
man/man8/xfs_scrub.8
scrub/phase1.c
scrub/vfs.c
scrub/xfs_scrub.c
scrub/xfs_scrub.h