Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/patches/2218235/?format=api
{ "id": 2218235, "url": "http://patchwork.ozlabs.org/api/patches/2218235/?format=api", "web_url": "http://patchwork.ozlabs.org/project/ubuntu-kernel/patch/20260331182602.64469-3-massimiliano.pellizzer@canonical.com/", "project": { "id": 15, "url": "http://patchwork.ozlabs.org/api/projects/15/?format=api", "name": "Ubuntu Kernel", "link_name": "ubuntu-kernel", "list_id": "kernel-team.lists.ubuntu.com", "list_email": "kernel-team@lists.ubuntu.com", "web_url": null, "scm_url": null, "webscm_url": null, "list_archive_url": "", "list_archive_url_format": "", "commit_url_format": "" }, "msgid": "<20260331182602.64469-3-massimiliano.pellizzer@canonical.com>", "list_archive_url": null, "date": "2026-03-31T18:26:02", "name": "[SRU,J,2/2] UBUNTU: SAUCE: overlayfs: default to userxattr when mounted from non initial user namespace", "commit_ref": null, "pull_url": null, "state": "new", "archived": false, "hash": "884f0687a141f9913103c9f2028a9e6809b2abfb", "submitter": { "id": 89057, "url": "http://patchwork.ozlabs.org/api/people/89057/?format=api", "name": "Massimiliano Pellizzer", "email": "massimiliano.pellizzer@canonical.com" }, "delegate": null, "mbox": "http://patchwork.ozlabs.org/project/ubuntu-kernel/patch/20260331182602.64469-3-massimiliano.pellizzer@canonical.com/mbox/", "series": [ { "id": 498238, "url": "http://patchwork.ozlabs.org/api/series/498238/?format=api", "web_url": "http://patchwork.ozlabs.org/project/ubuntu-kernel/list/?series=498238", "date": "2026-03-31T18:26:00", "name": "CVE-2023-2640 and CVE-2023-32629", "version": 1, "mbox": "http://patchwork.ozlabs.org/series/498238/mbox/" } ], "comments": "http://patchwork.ozlabs.org/api/patches/2218235/comments/", "check": "pending", "checks": "http://patchwork.ozlabs.org/api/patches/2218235/checks/", "tags": {}, "related": [], "headers": { "Return-Path": "<kernel-team-bounces@lists.ubuntu.com>", "X-Original-To": "incoming@patchwork.ozlabs.org", "Delivered-To": "patchwork-incoming@legolas.ozlabs.org", "Authentication-Results": [ "legolas.ozlabs.org;\n\tdkim=fail reason=\"signature verification failed\" (4096-bit key;\n unprotected) header.d=canonical.com header.i=@canonical.com\n header.a=rsa-sha256 header.s=20251003 header.b=MjlMFrK7;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=lists.ubuntu.com\n (client-ip=185.125.189.65; helo=lists.ubuntu.com;\n envelope-from=kernel-team-bounces@lists.ubuntu.com;\n receiver=patchwork.ozlabs.org)" ], "Received": [ "from lists.ubuntu.com (lists.ubuntu.com [185.125.189.65])\n\t(using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits))\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4flc6410nVz1yGT\n\tfor <incoming@patchwork.ozlabs.org>; Wed, 01 Apr 2026 05:27:08 +1100 (AEDT)", "from localhost ([127.0.0.1] helo=lists.ubuntu.com)\n\tby lists.ubuntu.com with esmtp (Exim 4.86_2)\n\t(envelope-from <kernel-team-bounces@lists.ubuntu.com>)\n\tid 1w7dnp-0007vX-Ai; Tue, 31 Mar 2026 18:27:01 +0000", "from smtp-relay-internal-1.internal ([10.131.114.114]\n helo=smtp-relay-internal-1.canonical.com)\n by lists.ubuntu.com with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)\n (Exim 4.86_2) (envelope-from <massimiliano.pellizzer@canonical.com>)\n id 1w7dnn-0007tP-2f\n for kernel-team@lists.ubuntu.com; Tue, 31 Mar 2026 18:26:59 +0000", "from mail-lj1-f197.google.com (mail-lj1-f197.google.com\n [209.85.208.197])\n (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest\n SHA256)\n (No client certificate requested)\n by smtp-relay-internal-1.canonical.com (Postfix) with ESMTPS id E436E3F365\n for <kernel-team@lists.ubuntu.com>; Tue, 31 Mar 2026 18:26:58 +0000 (UTC)", "by mail-lj1-f197.google.com with SMTP id\n 38308e7fff4ca-38bf2269e07so621171fa.1\n for <kernel-team@lists.ubuntu.com>; Tue, 31 Mar 2026 11:26:58 -0700 (PDT)", "from framework.ts.net (net-93-71-66-38.cust.vodafonedsl.it.\n [93.71.66.38]) by smtp.gmail.com with ESMTPSA id\n 38308e7fff4ca-38c836d3f25sm23444221fa.9.2026.03.31.11.26.56\n for <kernel-team@lists.ubuntu.com>\n (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n Tue, 31 Mar 2026 11:26:56 -0700 (PDT)" ], "DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed; d=canonical.com;\n s=20251003; t=1774981618;\n bh=KCPGjFFfM57kHJCR7wC5LU+k3GSxi10Zt3Z16zcutCM=;\n h=From:To:Subject:Date:Message-ID:In-Reply-To:References:\n MIME-Version;\n b=MjlMFrK7aJOwsMy/S0ilEBlLo30d99yLaUk9p4UsqwFuYNmL0SIUNKWiCsBS9utzB\n 49OG1n9JFK3v+fFSAa3Qhwb34c6G8HN0HL06aTZPVxkumJTHU8oKYp/yuutYTTbZmD\n CqY9sxt49xX03mUUNpZSZN8o/A4WBHO93J2YE7Ye72S5vaR8SsBofgKLoJNMXUveYt\n /knTPUW9OjRFhyRAbkFLhAvQbB75DuK+pCrBKq4SBJPg2aIQgFf0UQP0eUNpxTwZQ7\n uV61/bZshitceNfGdqhcr+8pYl/9+WUcySuT9J7A7u9gg6N7kDKeIXogAb78TFgPWq\n MTABP+QzHjC3D6oVnwXIVBh9MPi4McfxKGWQSTCH57vpidQWOEaUhCxTRgkgQi2CfF\n 77tKF8yHHN9cDCdbVG32aIIfpbZocpcisDEHwDLv4B3mOg0D/o9KJI77it8JGpqqPC\n Dsx5MlIao3Rn8n5hH2pFVY2CJ/KSlMdx/KJFY5aAf63CkUb3BjJ+IPCWlXB4Ll/4Ow\n y25IFzW+4KgEcNBULlqH9OsPyotMmtftitCAaBMkhdpycuQPStyuuPDX5Y445/5usD\n QFYDHopWvdY/a5x2ANmG3utV2RS0Z06XG5yfxfhvPidURpyDwASfvNAYUsjYbqb8e3\n 9dfnhwF+dhKOcRWzJpYRSs7I=", "X-Google-DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20251104; t=1774981618; x=1775586418;\n h=content-transfer-encoding:mime-version:references:in-reply-to\n :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to\n :cc:subject:date:message-id:reply-to;\n bh=KCPGjFFfM57kHJCR7wC5LU+k3GSxi10Zt3Z16zcutCM=;\n b=kMQEurzsUHRGETEublmjh/GvapuPdZkgtregudXHp/Q9haycEGPKxhz+c0hV8B0ugV\n WbNO9DRYQfGt9lbjqbJUQoijPie/90J0fWdxp9nauNNxvfoZRmbgqlgM8VfzotrBO6IX\n DJomwxa2bUGSYZfdzME9TvzLBiVXRxr1B1SZpQWGXUx4rq34+fgK6IjnbK8dcP31h+Sn\n xK0dOWLN87SEZl1HEiSb2kA3C1l/LkurgaouTsRKr6h/keyjYQizo0GDO7Vy81zMaXO+\n Xt38qANGiVHLjGbG1Bm1EnkpP8zerc2WbdXq0LeTKXjQoYZNYofHppw92949u+mt9/lf\n 2M/Q==", "X-Gm-Message-State": "AOJu0YxdtY1NJj3ZFTbjvQh4sP6pIiicTNRKpPzk0kzngg/thG9qj6Ki\n OX83Jw1h1R5g8zO8hVTfWWYNAMEWCJ+xMsg4l06gS0V2KZS182ia+SY8PCov5DwSOBEW4tBRdoe\n PVgMgvgoLkw07+h4TeCo82vfIjS1gv1UXf3EPcdNppyzMP05I1UzL8YUwvgs0fnQ/narcBPD+xz\n iFhcCrtSP9V+Cvaw==", "X-Gm-Gg": "ATEYQzyd7PbElS6Eta6WuFfT7ZmfNT2DNWJ6PHGYmZVWsU3rhH3q7tSEo/Xb2mVRzPQ\n AxwdqpzAVCDIko9Ss9kIEeijaIL0rIyXzCYqKYaNU16m1JoLqL2yYuKCzagNucDBoJ77Agiin7A\n hlWI+R7Gipz1BdeVlb+Qihp45nkTShegMatD7+Pt0cMe5kXZ8SjlVO0ezmEM9D8LvzW5b0U1+Aa\n ZhzlYLe3OdneI8lp3SQtn98+fhCxE5SwilkiusBdMaW5dVm7fOSN3w5ysInrisL2ZHXQB/4iGHx\n mytHnhdOF440zKwrdonE9Q07jbzH/F/T8xcA/bX1WxU5boRWNgNPU4NBFlSCFv9vniE/QTbW1tu\n u8uVZvmbPEb0NzTTZGVyVGNMtELXyVqxtdwVOvf3BFuojsTls3A1N+9jx/BcslC6+j/faMJBzZ2\n GCMjg54XzNL7/BVCudkenRYrXtxNCaEXIRb9GGMlemoLYMAePy17YyZ2Z+WmITAHvphnr5HwA=", "X-Received": [ "by 2002:a05:651c:4404:20b0:389:e2e8:4f4c with SMTP id\n 38308e7fff4ca-38cb1bd1375mr12125151fa.21.1774981617840;\n Tue, 31 Mar 2026 11:26:57 -0700 (PDT)", "by 2002:a05:651c:4404:20b0:389:e2e8:4f4c with SMTP id\n 38308e7fff4ca-38cb1bd1375mr12125081fa.21.1774981617285;\n Tue, 31 Mar 2026 11:26:57 -0700 (PDT)" ], "From": "Massimiliano Pellizzer <massimiliano.pellizzer@canonical.com>", "To": "kernel-team@lists.ubuntu.com", "Subject": "[SRU][J][PATCH 2/2] UBUNTU: SAUCE: overlayfs: default to userxattr\n when mounted from non initial user namespace", "Date": "Tue, 31 Mar 2026 20:26:02 +0200", "Message-ID": "<20260331182602.64469-3-massimiliano.pellizzer@canonical.com>", "X-Mailer": "git-send-email 2.51.0", "In-Reply-To": "<20260331182602.64469-1-massimiliano.pellizzer@canonical.com>", "References": "<20260331182602.64469-1-massimiliano.pellizzer@canonical.com>", "MIME-Version": "1.0", "X-BeenThere": "kernel-team@lists.ubuntu.com", "X-Mailman-Version": "2.1.20", "Precedence": "list", "List-Id": "Kernel team discussions <kernel-team.lists.ubuntu.com>", "List-Unsubscribe": "<https://lists.ubuntu.com/mailman/options/kernel-team>,\n <mailto:kernel-team-request@lists.ubuntu.com?subject=unsubscribe>", "List-Archive": "<https://lists.ubuntu.com/archives/kernel-team>", "List-Post": "<mailto:kernel-team@lists.ubuntu.com>", "List-Help": "<mailto:kernel-team-request@lists.ubuntu.com?subject=help>", "List-Subscribe": "<https://lists.ubuntu.com/mailman/listinfo/kernel-team>,\n <mailto:kernel-team-request@lists.ubuntu.com?subject=subscribe>", "Content-Type": "text/plain; charset=\"utf-8\"", "Content-Transfer-Encoding": "base64", "Errors-To": "kernel-team-bounces@lists.ubuntu.com", "Sender": "\"kernel-team\" <kernel-team-bounces@lists.ubuntu.com>" }, "content": "Also add a nouserxattr for the cases where it is desirable to mount without\nuserxattr under such namespaces.\n\nThis allows cases where such xattrs are necessary for certain operations to\nwork out, instead of failing due to not being able to use the\ntrusted.overlay.* xattrs.\n\nCVE-2023-2640\nCVE-2023-32629\nSigned-off-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>\nSigned-off-by: Massimiliano Pellizzer <massimiliano.pellizzer@canonical.com>\n---\n fs/overlayfs/super.c | 10 ++++++++++\n 1 file changed, 10 insertions(+)", "diff": "diff --git a/fs/overlayfs/super.c b/fs/overlayfs/super.c\nindex e1c4449e30993..e21574191d8b4 100644\n--- a/fs/overlayfs/super.c\n+++ b/fs/overlayfs/super.c\n@@ -388,6 +388,8 @@ static int ovl_show_options(struct seq_file *m, struct dentry *dentry)\n \t\tseq_puts(m, \",volatile\");\n \tif (ofs->config.userxattr)\n \t\tseq_puts(m, \",userxattr\");\n+\telse\n+\t\tseq_puts(m, \",nouserxattr\");\n \treturn 0;\n }\n \n@@ -436,6 +438,7 @@ enum {\n \tOPT_UUID_OFF,\n \tOPT_NFS_EXPORT_ON,\n \tOPT_USERXATTR,\n+\tOPT_NOUSERXATTR,\n \tOPT_NFS_EXPORT_OFF,\n \tOPT_XINO_ON,\n \tOPT_XINO_OFF,\n@@ -455,6 +458,7 @@ static const match_table_t ovl_tokens = {\n \t{OPT_INDEX_ON,\t\t\t\"index=on\"},\n \t{OPT_INDEX_OFF,\t\t\t\"index=off\"},\n \t{OPT_USERXATTR,\t\t\t\"userxattr\"},\n+\t{OPT_NOUSERXATTR,\t\t\"nouserxattr\"},\n \t{OPT_UUID_ON,\t\t\t\"uuid=on\"},\n \t{OPT_UUID_OFF,\t\t\t\"uuid=off\"},\n \t{OPT_NFS_EXPORT_ON,\t\t\"nfs_export=on\"},\n@@ -625,6 +629,10 @@ static int ovl_parse_opt(char *opt, struct ovl_config *config)\n \t\t\tconfig->userxattr = true;\n \t\t\tbreak;\n \n+\t\tcase OPT_NOUSERXATTR:\n+\t\t\tconfig->userxattr = false;\n+\t\t\tbreak;\n+\n \t\tdefault:\n \t\t\tpr_err(\"unrecognized mount option \\\"%s\\\" or missing value\\n\",\n \t\t\t\t\tp);\n@@ -2009,6 +2017,8 @@ static int ovl_fill_super(struct super_block *sb, void *data, int silent)\n \tofs->config.nfs_export = ovl_nfs_export_def;\n \tofs->config.xino = ovl_xino_def();\n \tofs->config.metacopy = ovl_metacopy_def;\n+\tif (sb->s_user_ns != &init_user_ns)\n+\t\tofs->config.userxattr = true;\n \terr = ovl_parse_opt((char *) data, &ofs->config);\n \tif (err)\n \t\tgoto out_err;\n", "prefixes": [ "SRU", "J", "2/2" ] }