Re: [PATCH 0/2] Rename nsproxy.pid_ns and fix a related security bug

From
David Miller <davem@davemloft.net>
Date
2013-08-26 19:59:24
Also in
lkml
Reply to
Andy Lutomirski, 2013-08-22
From: Andy Lutomirski <luto@amacapital.net>
Date: Thu, 22 Aug 2013 11:39:14 -0700
    commit 92f28d973cce45ef5823209aab3138eb45d8b349
    Author: Eric W. Biederman [off-list ref]
    Date:   Fri Mar 15 01:03:33 2013 -0700

        scm: Require CAP_SYS_ADMIN over the current pidns to spoof pids.

Eric fell for my bogus claim that nsproxy->pid_ns was the current'
process's pid ns.  This isn't true.

Let's fix the bug and rename pid_ns so that no one gets this wrong again.

Signed-off-by: Andy Lutomirski <luto@amacapital.net>
Eric please take the time to review these changes, thanks.
Thread (6 messages) 6 messages, 3 authors, last reply 2013-08-27
Keyboard shortcuts
hback out one level
jnext message in thread / next series-diff position
kprevious message in thread / previous series-diff position
ldrill in
Escclose help / fold thread tree
?toggle this help