Mike Baynton 1e3d10dc29 Make ovl idmap mounts read-only ...

This is a planned follow-on from #10721 primarily at the request of
@fuweid, exchanging MNT_DETACH at unmount time for MOUNT_ATTR_RDONLY at
mount time. The effect is to increase risk of unmount failure due to
EBUSY (as observed in the wild) but add an additional protection that the
then-leaked bind mount does not act as a conduit for inadvertent modification
of the underlying data, including our own efforts to clean up the mountpoint.

Tests covering the lifecycle of the temporary idmap mounts and integrity
of the underlying lower layer data is also included in the normal and
failed-unmount case.

Fixes #10704

Signed-off-by: Mike Baynton <mike@mbaynton.com>

2024-12-21 16:02:33 -06:00

..

check_test.go

mv internal/testutil pkg/testutil

2024-03-04 17:00:39 +09:00

check.go

Make ovl idmap mounts read-only

2024-12-21 16:02:33 -06:00