From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 0900DD37E27 for ; Wed, 14 Jan 2026 13:07:09 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id 6ED9D6B00A2; Wed, 14 Jan 2026 08:07:08 -0500 (EST) Received: by kanga.kvack.org (Postfix, from userid 40) id 6718A6B00A3; Wed, 14 Jan 2026 08:07:08 -0500 (EST) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 553766B00A5; Wed, 14 Jan 2026 08:07:08 -0500 (EST) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0013.hostedemail.com [216.40.44.13]) by kanga.kvack.org (Postfix) with ESMTP id 446246B00A2 for ; Wed, 14 Jan 2026 08:07:08 -0500 (EST) Received: from smtpin24.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay01.hostedemail.com (Postfix) with ESMTP id 84E031BCD0 for ; Wed, 14 Jan 2026 13:07:07 +0000 (UTC) X-FDA: 84330594894.24.AFE248E Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) by imf07.hostedemail.com (Postfix) with ESMTP id 9E4C040012 for ; Wed, 14 Jan 2026 13:07:04 +0000 (UTC) Authentication-Results: imf07.hostedemail.com; dkim=pass header.d=infradead.org header.s=bombadil.20210309 header.b=CsUTToet; spf=none (imf07.hostedemail.com: domain of BATV+26d5290b15125d0fae64+8179+infradead.org+hch@bombadil.srs.infradead.org has no SPF policy when checking 198.137.202.133) smtp.mailfrom=BATV+26d5290b15125d0fae64+8179+infradead.org+hch@bombadil.srs.infradead.org; dmarc=pass (policy=none) header.from=infradead.org ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1768396025; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=frpDmmp1i4r1AZelS3CVor2fKx/lP0Tq5j8/mhEG/8s=; b=7DLqioijn2Zm4+BMN+ElnuEoORmyiyIaPcIXxUmjCR9pafTzYHyE/W8TVcR4gthcEStGzO 0+IDvwyESN91xDjdTOJyP0GzxUfapbTFbSzwjnXsdrHbcyYMvBf2ZbdRBi/8vOoZMBRog+ lh2LqGKw0Vsx+bzYkFwL5veL7yznoNc= ARC-Authentication-Results: i=1; imf07.hostedemail.com; dkim=pass header.d=infradead.org header.s=bombadil.20210309 header.b=CsUTToet; spf=none (imf07.hostedemail.com: domain of BATV+26d5290b15125d0fae64+8179+infradead.org+hch@bombadil.srs.infradead.org has no SPF policy when checking 198.137.202.133) smtp.mailfrom=BATV+26d5290b15125d0fae64+8179+infradead.org+hch@bombadil.srs.infradead.org; dmarc=pass (policy=none) header.from=infradead.org ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1768396025; a=rsa-sha256; cv=none; b=rG2yVybHhDOSnWTQJaJEQ4518I/GTio+JYfJLtqdesYEAwaSJqhaeClLSeCE7mOpA63lNY QlmP32iSudIMIbO4BBNbKaCvbLJ2IE6u0OgVCPYPILR6uuXRiYqy50NKgdUJLXWL1eI27W 0lGSTBe9DlKGTGARPQRSnBMgskSJ8n4= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=infradead.org; s=bombadil.20210309; h=In-Reply-To:Content-Transfer-Encoding :Content-Type:MIME-Version:References:Message-ID:Subject:Cc:To:From:Date: Sender:Reply-To:Content-ID:Content-Description; bh=frpDmmp1i4r1AZelS3CVor2fKx/lP0Tq5j8/mhEG/8s=; b=CsUTToetKF+Id6BSRt8PfLBnAS Y0ul3yOPNvK2EqLosGUY3uqxb0rBGjpkb3pFkF+nzL0tn0KOBAl2xhlehcW9SbJloDYCaYos/fI+R /3mikrJStWJrWeOJzR2PeycF0eBRtBI6m7fleAVeDpZJmAWb5/mhUGXdyVHOSGGKP+FgMpRotCkGe U4rxrSW9vdcoJ/4xvbYl6nQLLy/pVnBBXwulC6bpAsoSvSw4Aw1pxxyPY2C1RxEdi/vm7DGCPqLOa XPJH2SpQwhbv/9XjUm+ADr7Kr9Po4kKl3x0XMHBhpwdVI/FJYFR2ISU4AMVB1IFKkKKX1rv/bPqoF Uf0wlX6w==; Received: from hch by bombadil.infradead.org with local (Exim 4.98.2 #2 (Red Hat Linux)) id 1vg0Zb-00000009Gnt-0ut4; Wed, 14 Jan 2026 13:06:07 +0000 Date: Wed, 14 Jan 2026 05:06:07 -0800 From: Christoph Hellwig To: Amir Goldstein Cc: Christoph Hellwig , Jeff Layton , Christian Brauner , Chuck Lever , Jan Kara , Luis de Bethencourt , Salah Triki , Nicolas Pitre , Anders Larsen , Alexander Viro , David Sterba , Chris Mason , Gao Xiang , Chao Yu , Yue Hu , Jeffle Xu , Sandeep Dhavale , Hongbo Li , Chunhai Guo , Jan Kara , Theodore Ts'o , Andreas Dilger , Jaegeuk Kim , OGAWA Hirofumi , David Woodhouse , Richard Weinberger , Dave Kleikamp , Ryusuke Konishi , Viacheslav Dubeyko , Konstantin Komarov , Mark Fasheh , Joel Becker , Joseph Qi , Mike Marshall , Martin Brandenburg , Miklos Szeredi , Phillip Lougher , Carlos Maiolino , Hugh Dickins , Baolin Wang , Andrew Morton , Namjae Jeon , Sungjong Seo , Yuezhang Mo , Alexander Aring , Andreas Gruenbacher , Jonathan Corbet , "Matthew Wilcox (Oracle)" , Eric Van Hensbergen , Latchesar Ionkov , Dominique Martinet , Christian Schoenebeck , Xiubo Li , Ilya Dryomov , Trond Myklebust , Anna Schumaker , Steve French , Paulo Alcantara , Ronnie Sahlberg , Shyam Prasad N , Tom Talpey , Bharath SM , Hans de Goede , linux-kernel@vger.kernel.org, linux-fsdevel@vger.kernel.org, linux-btrfs@vger.kernel.org, linux-erofs@lists.ozlabs.org, linux-ext4@vger.kernel.org, linux-f2fs-devel@lists.sourceforge.net, linux-mtd@lists.infradead.org, jfs-discussion@lists.sourceforge.net, linux-nilfs@vger.kernel.org, ntfs3@lists.linux.dev, ocfs2-devel@lists.linux.dev, devel@lists.orangefs.org, linux-unionfs@vger.kernel.org, linux-xfs@vger.kernel.org, linux-mm@kvack.org, gfs2@lists.linux.dev, linux-doc@vger.kernel.org, v9fs@lists.linux.dev, ceph-devel@vger.kernel.org, linux-nfs@vger.kernel.org, linux-cifs@vger.kernel.org, samba-technical@lists.samba.org Subject: Re: [PATCH 00/24] vfs: require filesystems to explicitly opt-in to lease support Message-ID: References: <8af369636c32b868f83669c49aea708ca3b894ac.camel@kernel.org> <20260113-mondlicht-raven-82fc4eb70e9d@brauner> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: X-SRS-Rewrite: SMTP reverse-path rewritten from by bombadil.infradead.org. See http://www.infradead.org/rpr.html X-Stat-Signature: ckhq597npnk75mqk3j9f1e4ezrkgewkg X-Rspamd-Queue-Id: 9E4C040012 X-Rspam-User: X-Rspamd-Server: rspam02 X-HE-Tag: 1768396024-106149 X-HE-Meta: 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 j+hqE8co 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 X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: List-Subscribe: List-Unsubscribe: On Wed, Jan 14, 2026 at 10:34:04AM +0100, Amir Goldstein wrote: > On Wed, Jan 14, 2026 at 7:28 AM Christoph Hellwig wrote: > > > > On Tue, Jan 13, 2026 at 12:06:42PM -0500, Jeff Layton wrote: > > > Fair point, but it's not that hard to conceive of a situation where > > > someone inadvertantly exports cgroupfs or some similar filesystem: > > > > Sure. But how is this worse than accidentally exporting private data > > or any other misconfiguration? > > > > My POV is that it is less about security (as your question implies), and > more about correctness. I was just replying to Jeff. > The special thing about NFS export, as opposed to, say, ksmbd, is > open by file handle, IOW, the export_operations. > > I perceive this as a very strange and undesired situation when NFS > file handles do not behave as persistent file handles. That is not just very strange, but actually broken (discounting the obscure volatile file handles features not implemented in Linux NFS and NFSD). And the export ops always worked under the assumption that these file handles are indeed persistent. If they're not we do have a problem. > > cgroupfs, pidfs, nsfs, all gained open_by_handle_at() capability for > a known reason, which was NOT NFS export. > > If the author of open_by_handle_at() support (i.e. brauner) does not > wish to imply that those fs should be exported to NFS, why object? Because "want to export" is a stupid category. OTOH "NFS exporting doesn't actually properly work because someone overloaded export_ops with different semantics" is a valid category. > We could have the opt-in/out of NFS export fixes per EXPORT_OP_ > flags and we could even think of allowing admin to make this decision > per vfsmount (e.g. for cgroupfs). > > In any case, I fail to see how objecting to the possibility of NFS export > opt-out serves anyone. You're still think of it the wrong way. If we do have file systems that break the original exportfs semantics we need to fix that, and something like a "stable handles" flag will work well for that. But a totally arbitrary "is exportable" flag is total nonsense.