)]}' { "log": [ { "commit": "8254798199332966e2ab647380c990193af7e854", "tree": "ad4a9721a872fbdec0be107f35684864a1a94053", "parents": [ "b36c31ba95f0fe0a03c727300d9c4c54438a5636" ], "author": { "name": "Miklos Szeredi", "email": "miklos@szeredi.hu", "time": "Fri Sep 09 13:10:38 2005 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@g5.osdl.org", "time": "Fri Sep 09 14:03:47 2005 -0700" }, "message": "[PATCH] FUSE: add fsync operation for directories\n\nThis patch adds a new FSYNCDIR request, which is sent when fsync is called\non directories. This operation is available in libfuse 2.3-pre1 or\ngreater.\n\nSigned-off-by: Miklos Szeredi \u003cmiklos@szeredi.hu\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" }, { "commit": "45323fb76465a9576220c7427dbac7b1e7ad3caf", "tree": "5d3e5f9a01cdaf6aaabe38520d5bd5b2d744acd5", "parents": [ "04730fef1f9c7277e5c730b193e681ac095b0507" ], "author": { "name": "Miklos Szeredi", "email": "miklos@szeredi.hu", "time": "Fri Sep 09 13:10:37 2005 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@g5.osdl.org", "time": "Fri Sep 09 14:03:47 2005 -0700" }, "message": "[PATCH] fuse: more flexible caching\n\nMake data caching behavior selectable on a per-open basis instead of\nper-mount. Compatibility for the old mount options \u0027kernel_cache\u0027 and\n\u0027direct_io\u0027 is retained in the userspace library (version 2.4.0-pre1 or\nlater).\n\nSigned-off-by: Miklos Szeredi \u003cmiklos@szeredi.hu\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" }, { "commit": "04730fef1f9c7277e5c730b193e681ac095b0507", "tree": "3694ea435eb38f10dadc5c8b6abd603a7e10f52e", "parents": [ "413ef8cb302511d8e995e2b0e5517ee1a65b9c77" ], "author": { "name": "Miklos Szeredi", "email": "miklos@szeredi.hu", "time": "Fri Sep 09 13:10:36 2005 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@g5.osdl.org", "time": "Fri Sep 09 14:03:47 2005 -0700" }, "message": "[PATCH] fuse: transfer readdir data through device\n\nThis patch removes a long lasting \"hack\" in FUSE, which used a separate\nchannel (a file descriptor refering to a disk-file) to transfer directory\ncontents from userspace to the kernel.\n\nThe patch adds three new operations (OPENDIR, READDIR, RELEASEDIR), which\nhave semantics and implementation exactly maching the respective file\noperations (OPEN, READ, RELEASE).\n\nThis simplifies the directory reading code. Also disk space is not\nnecessary, which can be important in embedded systems.\n\nSigned-off-by: Miklos Szeredi \u003cmiklos@szeredi.hu\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" }, { "commit": "06663267b4b1e85ece73236ea720355668d4f736", "tree": "caece1ce21caf6586e82e03858dc128edb8e996c", "parents": [ "92a8780e1136c5ca0c7ed940000d399943d1576e" ], "author": { "name": "Miklos Szeredi", "email": "miklos@szeredi.hu", "time": "Fri Sep 09 13:10:32 2005 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@g5.osdl.org", "time": "Fri Sep 09 14:03:46 2005 -0700" }, "message": "[PATCH] FUSE: add padding\n\nAdd padding to structures to make sizes the same on 32bit and 64bit archs.\nInitial testing and test machine generously provided by Franco Broi.\n\nSigned-off-by: Miklos Szeredi \u003cmiklos@szeredi.hu\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" }, { "commit": "92a8780e1136c5ca0c7ed940000d399943d1576e", "tree": "b7fb327d66c06b47156f157c470f3ac7fed31682", "parents": [ "1e9a4ed9396e9c31139721b639550ffb1df17065" ], "author": { "name": "Miklos Szeredi", "email": "miklos@szeredi.hu", "time": "Fri Sep 09 13:10:31 2005 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@g5.osdl.org", "time": "Fri Sep 09 14:03:45 2005 -0700" }, "message": "[PATCH] FUSE - extended attribute operations\n\nThis patch adds the extended attribute operations to FUSE.\n\nThe following operations are added:\n\n o getxattr\n o setxattr\n o listxattr\n o removexattr\n\nSigned-off-by: Miklos Szeredi \u003cmiklos@szeredi.hu\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" }, { "commit": "b6aeadeda22a9aa322fdfcd3f4c69ccf0da5cbdd", "tree": "794afec0eeb13722550a97783ec0cfb95e5e83cb", "parents": [ "9e6268db496a2592e89457537ea54a496feabb77" ], "author": { "name": "Miklos Szeredi", "email": "miklos@szeredi.hu", "time": "Fri Sep 09 13:10:30 2005 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@g5.osdl.org", "time": "Fri Sep 09 14:03:45 2005 -0700" }, "message": "[PATCH] FUSE - file operations\n\nThis patch adds the file operations of FUSE.\n\nThe following operations are added:\n\n o open\n o flush\n o release\n o fsync\n o readpage\n o commit_write\n\nSigned-off-by: Miklos Szeredi \u003cmiklos@szeredi.hu\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" }, { "commit": "9e6268db496a2592e89457537ea54a496feabb77", "tree": "e01d0d7585886fd318b6f16de9329349a629e3f8", "parents": [ "e5e5558e923f35839108a12718494ecb73fb782f" ], "author": { "name": "Miklos Szeredi", "email": "miklos@szeredi.hu", "time": "Fri Sep 09 13:10:29 2005 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@g5.osdl.org", "time": "Fri Sep 09 14:03:45 2005 -0700" }, "message": "[PATCH] FUSE - read-write operations\n\nThis patch adds the write filesystem operations of FUSE.\n\nThe following operations are added:\n\n o setattr\n o symlink\n o mknod\n o mkdir\n o create\n o unlink\n o rmdir\n o rename\n o link\n\nSigned-off-by: Miklos Szeredi \u003cmiklos@szeredi.hu\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" }, { "commit": "e5e5558e923f35839108a12718494ecb73fb782f", "tree": "c410d6826e9df13f7ea9e382a26589b66ec0989c", "parents": [ "334f485df85ac7736ebe14940bf0a059c5f26d7d" ], "author": { "name": "Miklos Szeredi", "email": "miklos@szeredi.hu", "time": "Fri Sep 09 13:10:28 2005 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@g5.osdl.org", "time": "Fri Sep 09 14:03:45 2005 -0700" }, "message": "[PATCH] FUSE - read-only operations\n\nThis patch adds the read-only filesystem operations of FUSE.\n\nThis contains the following files:\n\n o dir.c\n - directory, symlink and file-inode operations\n\nThe following operations are added:\n\n o lookup\n o getattr\n o readlink\n o follow_link\n o directory open\n o readdir\n o directory release\n o permission\n o dentry revalidate\n o statfs\n\nSigned-off-by: Miklos Szeredi \u003cmiklos@szeredi.hu\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" }, { "commit": "334f485df85ac7736ebe14940bf0a059c5f26d7d", "tree": "754e5528289048a7104f4c1b431cebc1df16e2ce", "parents": [ "d8a5ba45457e4a22aa39c939121efd7bb6c76672" ], "author": { "name": "Miklos Szeredi", "email": "miklos@szeredi.hu", "time": "Fri Sep 09 13:10:27 2005 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@g5.osdl.org", "time": "Fri Sep 09 14:03:44 2005 -0700" }, "message": "[PATCH] FUSE - device functions\n\nThis adds the FUSE device handling functions.\n\nThis contains the following files:\n\n o dev.c\n - fuse device operations (read, write, release, poll)\n - registers misc device\n - support for sending requests to userspace\n\nSigned-off-by: Miklos Szeredi \u003cmiklos@szeredi.hu\u003e\nSigned-off-by: Adrian Bunk \u003cbunk@stusta.de\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" }, { "commit": "d8a5ba45457e4a22aa39c939121efd7bb6c76672", "tree": "686aa90d8c953326b8d2eeef9352e456cdb0ad52", "parents": [ "04578f174f43d29b569500f01ba772afa4016330" ], "author": { "name": "Miklos Szeredi", "email": "miklos@szeredi.hu", "time": "Fri Sep 09 13:10:26 2005 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@g5.osdl.org", "time": "Fri Sep 09 14:03:44 2005 -0700" }, "message": "[PATCH] FUSE - core\n\nThis patch adds FUSE core.\n\nThis contains the following files:\n\n o inode.c\n - superblock operations (alloc_inode, destroy_inode, read_inode,\n clear_inode, put_super, show_options)\n - registers FUSE filesystem\n\n o fuse_i.h\n - private header file\n\nRequirements\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\n The most important difference between orinary filesystems and FUSE is\n the fact, that the filesystem data/metadata is provided by a userspace\n process run with the privileges of the mount \"owner\" instead of the\n kernel, or some remote entity usually running with elevated\n privileges.\n\n The security implication of this is that a non-privileged user must\n not be able to use this capability to compromise the system. Obvious\n requirements arising from this are:\n\n - mount owner should not be able to get elevated privileges with the\n help of the mounted filesystem\n\n - mount owner should not be able to induce undesired behavior in\n other users\u0027 or the super user\u0027s processes\n\n - mount owner should not get illegitimate access to information from\n other users\u0027 and the super user\u0027s processes\n\n These are currently ensured with the following constraints:\n\n 1) mount is only allowed to directory or file which the mount owner\n can modify without limitation (write access + no sticky bit for\n directories)\n\n 2) nosuid,nodev mount options are forced\n\n 3) any process running with fsuid different from the owner is denied\n all access to the filesystem\n\n 1) and 2) are ensured by the \"fusermount\" mount utility which is a\n setuid root application doing the actual mount operation.\n\n 3) is ensured by a check in the permission() method in kernel\n\n I started thinking about doing 3) in a different way because Christoph\n H. made a big deal out of it, saying that FUSE is unacceptable into\n mainline in this form.\n\n The suggested use of private namespaces would be OK, but in their\n current form have many limitations that make their use impractical (as\n discussed in this thread).\n\n Suggested improvements that would address these limitations:\n\n - implement shared subtrees\n\n - allow a process to join an existing namespace (make namespaces\n first-class objects)\n\n - implement the namespace creation/joining in a PAM module\n\n With all that in place the check of owner against current-\u003efsuid may\n be removed from the FUSE kernel module, without compromising the\n security requirements.\n\n Suid programs still interesting questions, since they get access even\n to the private namespace causing some information leak (exact\n order/timing of filesystem operations performed), giving some\n ptrace-like capabilities to unprivileged users. BTW this problem is\n not strictly limited to the namespace approach, since suid programs\n setting fsuid and accessing users\u0027 files will succeed with the current\n approach too.\n\nSigned-off-by: Miklos Szeredi \u003cmiklos@szeredi.hu\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" } ] }