tree b5ca89d2ee7d508616995e9b68792fb8363e844c
parent e593b2bf513dd4d3fbfa0f435392eea2c7f776f0
author Konstantin Khlebnikov <khlebnikov@yandex-team.ru> 1484073021 +0300
committer Miklos Szeredi <mszeredi@redhat.com> 1486478834 +0100

ovl: drop CAP_SYS_RESOURCE from saved mounter's credentials

If overlay was mounted by root then quota set for upper layer does not work
because overlay now always use mounter's credentials for operations.
Also overlay might deplete reserved space and inodes in ext4.

This patch drops capability SYS_RESOURCE from saved credentials.
This affects creation new files, whiteouts, and copy-up operations.

Signed-off-by: Konstantin Khlebnikov <khlebnikov@yandex-team.ru>
Fixes: 1175b6b8d963 ("ovl: do operations on underlying file system in mounter's context")
Cc: Vivek Goyal <vgoyal@redhat.com>
Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>