linux-ext4 - [PATCHSET RFC v5 9/9] fuse4fs: run servers as a contained service

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <175798163083.392148.13563951490661745612.stgit@frogsfrogsfrogs>
Date: Mon, 15 Sep 2025 17:24:01 -0700
From: "Darrick J. Wong" <djwong@...nel.org>
To: tytso@....edu
Cc: miklos@...redi.hu, neal@...pa.dev, linux-fsdevel@...r.kernel.org,
 linux-ext4@...r.kernel.org, John@...ves.net, bernd@...ernd.com,
 joannelkoong@...il.com
Subject: [PATCHSET RFC v5 9/9] fuse4fs: run servers as a contained service

Hi all,

In this final series of the fuse-iomap prototype, we package the newly
created fuse4fs server into a systemd socket service.  This service can
be used by the "mount.service" helper in libfuse to implement untrusted
unprivileged mounts.

If you're going to start using this code, I strongly recommend pulling
from my git trees, which are linked below.

Comments and questions are, as always, welcome.

e2fsprogs git tree:
https://git.kernel.org/cgit/linux/kernel/git/djwong/e2fsprogs.git/log/?h=fuse4fs-service-container
---
Commits in this patchset:
 * libext2fs: fix MMP code to work with unixfd IO manager
 * fuse4fs: enable safe service mode
 * fuse4fs: set proc title when in fuse service mode
 * fuse4fs: set iomap backing device blocksize
---
 MCONFIG.in                  |    1 
 configure                   |  181 +++++++++++++++++++++++++
 configure.ac                |   69 +++++++++
 debian/fuse4fs.install      |    2 
 fuse4fs/Makefile.in         |   42 +++++-
 fuse4fs/fuse4fs.c           |  315 +++++++++++++++++++++++++++++++++++++++++--
 fuse4fs/fuse4fs.socket.in   |   14 ++
 fuse4fs/fuse4fs@...rvice.in |   95 +++++++++++++
 lib/config.h.in             |    6 +
 lib/ext2fs/mmp.c            |   46 ++++++
 util/subst.conf.in          |    2 
 11 files changed, 750 insertions(+), 23 deletions(-)
 create mode 100644 fuse4fs/fuse4fs.socket.in
 create mode 100644 fuse4fs/fuse4fs@...rvice.in