netbird/gvisor
0
0
Fork 0
mirror of https://github.com/netbirdio/gvisor.git synced 2026-05-22 17:12:49 -07:00
Code Issues Packages Projects Releases Wiki Activity

Don't allow to umount the namespace root mount

Browse Source 
Linux does the same thing.

Reported-by: syzbot+6c79385c930c929d1d9e@syzkaller.appspotmail.com
PiperOrigin-RevId: 356854562
This commit is contained in:
Andrei Vagin
2021-02-10 16:32:45 -08:00
committed by gVisor bot
parent 96d3b3188b
commit 97a36d1696
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkg/sentry/vfs/mount.go
+5
View File
@@ -309,6 +309,11 @@ func (vfs *VirtualFilesystem) UmountAt(ctx context.Context, creds *auth.Credenti
vfs.mountMu.Unlock()
return syserror.EINVAL
}
if vd.mount == vd.mount.ns.root {
vfs.mountMu.Unlock()
return syserror.EINVAL
}
}
// TODO(gvisor.dev/issue/1035): Linux special-cases umount of the caller's