tree d7ac108d615869ea615eec8693993c2700b24351
parent 7a472ef4be8387bc05a42e16309b02c8ca943a40
author Eric W. Biederman <ebiederm@xmission.com> 1343364123 -0700
committer Eric W. Biederman <ebiederm@xmission.com> 1353333561 -0800

vfs: Allow unprivileged manipulation of the mount namespace.

- Add a filesystem flag to mark filesystems that are safe to mount as
  an unprivileged user.

- Add a filesystem flag to mark filesystems that don't need MNT_NODEV
  when mounted by an unprivileged user.

- Relax the permission checks to allow unprivileged users that have
  CAP_SYS_ADMIN permissions in the user namespace referred to by the
  current mount namespace to be allowed to mount, unmount, and move
  filesystems.

Acked-by: "Serge E. Hallyn" <serge@hallyn.com>
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>