linux/fs/overlayfs
Amir Goldstein 37b12916c0 ovl: verify stored origin fh matches lower dir
When the NFS export feature is enabled, overlayfs implicitly enables the
feature "verify_lower". When the "verify_lower" feature is enabled, a
directory inode found in lower layer by name or by redirect_dir is
verified against the file handle of the copy up origin that is stored in
the upper layer.

This introduces a change of behavior for the case of lower layer
modification while overlay is offline. A lower directory created or
moved offline under an exisitng upper directory, will not be merged with
that upper directory.

The NFS export feature should not be used after copying layers, because
the new lower directory inodes would fail verification and won't be
merged with upper directories.

Signed-off-by: Amir Goldstein <amir73il@gmail.com>
Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
2018-01-24 11:25:51 +01:00
..
copy_up.c ovl: generalize ovl_verify_origin() and helpers 2018-01-24 10:19:54 +01:00
dir.c ovl: take lower dir inode mutex outside upper sb_writers lock 2018-01-19 17:43:23 +01:00
inode.c ovl: hash directory inodes for fsnotify 2018-01-19 13:54:33 +01:00
Kconfig ovl: add support for "nfs_export" configuration 2018-01-24 11:25:37 +01:00
Makefile ovl: split super.c 2016-12-16 11:02:56 +01:00
namei.c ovl: verify stored origin fh matches lower dir 2018-01-24 11:25:51 +01:00
overlayfs.h ovl: add support for "nfs_export" configuration 2018-01-24 11:25:37 +01:00
ovl_entry.h ovl: add support for "nfs_export" configuration 2018-01-24 11:25:37 +01:00
readdir.c ovl: simplify arguments to ovl_check_origin_fh() 2018-01-24 10:19:46 +01:00
super.c ovl: add support for "nfs_export" configuration 2018-01-24 11:25:37 +01:00
util.c ovl: add support for "nfs_export" configuration 2018-01-24 11:25:37 +01:00