Thread (1 message) 1 message, 1 author, 2013-08-27

Re: [PATCH 0/2] Rename nsproxy.pid_ns and fix a related security bug

From: Eric W. Biederman <hidden>
Date: 2013-08-27 01:04:08
Also in: lkml

David Miller [off-list ref] writes:
From: Andy Lutomirski <luto@amacapital.net>
Date: Thu, 22 Aug 2013 11:39:14 -0700
quoted
    commit 92f28d973cce45ef5823209aab3138eb45d8b349
    Author: Eric W. Biederman [off-list ref]
    Date:   Fri Mar 15 01:03:33 2013 -0700

        scm: Require CAP_SYS_ADMIN over the current pidns to spoof pids.

Eric fell for my bogus claim that nsproxy->pid_ns was the current'
process's pid ns.  This isn't true.

Let's fix the bug and rename pid_ns so that no one gets this wrong again.

Signed-off-by: Andy Lutomirski <luto@amacapital.net>
Eric please take the time to review these changes, thanks.
Reviewed they are good.

My apologies for the delay life got in my way and I fell behind on
dealing with patches.

Eric
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help