mirror of
https://github.com/libfuse/libfuse.git
synced 2026-07-07 14:47:41 +08:00
Darrick J. Wong
5d8b9a39a1
Create a mount helper program that can start a fuse server that runs as a socket-based systemd service, and a new libfuse module to wrap all the details of communicating between the mount helper and the containerized fuse server. This enables untrusted ext4 mounts via systemd service containers, which avoids the problem of malicious filesystems compromising the integrity of the running kernel through memory corruption. In theory this could also be supported via inetd and clones, though the author hasn't found one that supports AF_UNIX sockets. Signed-off-by: "Darrick J. Wong" <djwong@kernel.org> Signed-off-by: Bernd Schubert <bernd@bsbernd.com>
39 lines
1.7 KiB
Meson
39 lines
1.7 KiB
Meson
option('disable-mtab', type : 'boolean', value : false,
|
|
description: 'Disable and ignore usage of /etc/mtab')
|
|
|
|
option('udevrulesdir', type : 'string', value : '',
|
|
description: 'Where to install udev rules (if empty, query pkg-config(1))')
|
|
|
|
option('initscriptdir', type : 'string', value : '/etc/init.d/',
|
|
description: 'Init script installation location (if empty, disable init script installation)')
|
|
|
|
option('utils', type : 'boolean', value : true,
|
|
description: 'Whether or not to build and install helper programs')
|
|
|
|
option('examples', type : 'boolean', value : true,
|
|
description: 'Whether or not to build example programs')
|
|
|
|
option('useroot', type : 'boolean', value : true,
|
|
description: 'Set owner and setuid bits on installed files')
|
|
|
|
option('tests', type : 'boolean', value : true,
|
|
description: 'Compile the test files')
|
|
|
|
option('disable-libc-symbol-version', type : 'boolean', value : false,
|
|
description: 'Disable versioned symbols through libc')
|
|
|
|
option('enable-usdt', type : 'boolean', value : false,
|
|
description: 'Enable user statically defined tracepoints for extra observability')
|
|
|
|
option('enable-io-uring', type: 'boolean', value: true,
|
|
description: 'Enable fuse-over-io-uring support')
|
|
|
|
option('service-socket-dir', type : 'string', value : '',
|
|
description: 'Where to install fuse server sockets (if empty, /run/filesystems)')
|
|
|
|
option('service-socket-perms', type : 'string', value : '',
|
|
description: 'Default fuse server socket permissions (if empty, 0220)')
|
|
|
|
option('systemd-system-unit-dir', type : 'string', value : '',
|
|
description: 'Where to install systemd unit files (if empty, query pkg-config(1))')
|