Linux Containers

• Date Index

• Re: [PATCH RFC v8 01/10] namei: obey trailing magic-link DAC permissions, (continued)
  • Re: [PATCH RFC v8 01/10] namei: obey trailing magic-link DAC permissions, Aleksa Sarai
    • Re: [PATCH RFC v8 01/10] namei: obey trailing magic-link DAC permissions, Aleksa Sarai
      • Re: [PATCH RFC v8 01/10] namei: obey trailing magic-link DAC permissions, Andy Lutomirski
  • [PATCH RFC v8 02/10] procfs: switch magic-link modes to be more sane, Aleksa Sarai
  • [PATCH RFC v8 03/10] open: O_EMPTYPATH: procfs-less file descriptor re-opening, Aleksa Sarai
  • [PATCH RFC v8 04/10] namei: split out nd->dfd handling to dirfd_path_init, Aleksa Sarai
  • [PATCH RFC v8 05/10] namei: O_BENEATH-style path resolution flags, Aleksa Sarai
  • [PATCH RFC v8 06/10] namei: LOOKUP_IN_ROOT: chroot-like path resolution, Aleksa Sarai
  • [PATCH RFC v8 07/10] namei: aggressively check for nd->root escape on ".." resolution, Aleksa Sarai
  • [PATCH RFC v8 08/10] namei: resolveat(2) syscall, Aleksa Sarai
  • [PATCH RFC v8 09/10] kselftest: save-and-restore errno to allow for %m formatting, Aleksa Sarai
  • [PATCH RFC v8 10/10] selftests: add resolveat(2) selftests, Aleksa Sarai
• [PATCH v7 0/5] namei: resolveat(2) path resolution restriction API, Aleksa Sarai
  • [PATCH v7 1/5] namei: split out nd->dfd handling to dirfd_path_init, Aleksa Sarai
  • [PATCH v7 2/5] namei: O_BENEATH-style path resolution flags, Aleksa Sarai
  • [PATCH v7 3/5] namei: LOOKUP_IN_ROOT: chroot-like path resolution, Aleksa Sarai
  • [PATCH v7 4/5] namei: aggressively check for nd->root escape on ".." resolution, Aleksa Sarai
  • [PATCH v7 5/5] namei: resolveat(2) syscall, Aleksa Sarai
    • Re: [PATCH v7 5/5] namei: resolveat(2) syscall, Linus Torvalds
      • Re: [PATCH v7 5/5] namei: resolveat(2) syscall, Aleksa Sarai
        • Re: [PATCH v7 5/5] namei: resolveat(2) syscall, Linus Torvalds
          • Re: [PATCH v7 5/5] namei: resolveat(2) syscall, Aleksa Sarai
• [PATCH v6 0/6] namei: resolveat(2) path resolution restriction API, Aleksa Sarai
  • [PATCH v6 1/6] namei: split out nd->dfd handling to dirfd_path_init, Aleksa Sarai
  • [PATCH v6 2/6] namei: O_BENEATH-style path resolution flags, Aleksa Sarai
  • [PATCH v6 3/6] namei: LOOKUP_IN_ROOT: chroot-like path resolution, Aleksa Sarai
  • [PATCH v6 4/6] namei: aggressively check for nd->root escape on ".." resolution, Aleksa Sarai
  • [PATCH v6 5/6] binfmt_*: scope path resolution of interpreters, Aleksa Sarai
    • Re: [PATCH v6 5/6] binfmt_*: scope path resolution of interpreters, Jann Horn via Containers
      • Re: [PATCH v6 5/6] binfmt_*: scope path resolution of interpreters, Aleksa Sarai
        • Re: [PATCH v6 5/6] binfmt_*: scope path resolution of interpreters, Andy Lutomirski
        • Re: [PATCH v6 5/6] binfmt_*: scope path resolution of interpreters, Aleksa Sarai
        • Re: [PATCH v6 5/6] binfmt_*: scope path resolution of interpreters, Jann Horn via Containers
          • Re: [PATCH v6 5/6] binfmt_*: scope path resolution of interpreters, Andy Lutomirski
            • Re: [PATCH v6 5/6] binfmt_*: scope path resolution of interpreters, Jann Horn via Containers
              • Re: [PATCH v6 5/6] binfmt_*: scope path resolution of interpreters, Christian Brauner
                • Re: [PATCH v6 5/6] binfmt_*: scope path resolution of interpreters, Aleksa Sarai
              • Re: [PATCH v6 5/6] binfmt_*: scope path resolution of interpreters, Andy Lutomirski
                • Re: [PATCH v6 5/6] binfmt_*: scope path resolution of interpreters, Aleksa Sarai
                • Re: [PATCH v6 5/6] binfmt_*: scope path resolution of interpreters, Linus Torvalds
                  • Re: [PATCH v6 5/6] binfmt_*: scope path resolution of interpreters, Linus Torvalds
                    • Re: [PATCH v6 5/6] binfmt_*: scope path resolution of interpreters, Aleksa Sarai
                      • Re: [PATCH v6 5/6] binfmt_*: scope path resolution of interpreters, Linus Torvalds
                        • Re: [PATCH v6 5/6] binfmt_*: scope path resolution of interpreters, Christian Brauner
                        • Re: [PATCH v6 5/6] binfmt_*: scope path resolution of interpreters, Aleksa Sarai
                  • Re: [PATCH v6 5/6] binfmt_*: scope path resolution of interpreters, Andy Lutomirski
                    • Re: [PATCH v6 5/6] binfmt_*: scope path resolution of interpreters, Linus Torvalds
                      • Re: [PATCH v6 5/6] binfmt_*: scope path resolution of interpreters, Andy Lutomirski
                        • Re: [PATCH v6 5/6] binfmt_*: scope path resolution of interpreters, Linus Torvalds
                          • Re: [PATCH v6 5/6] binfmt_*: scope path resolution of interpreters, Aleksa Sarai
                            • Re: [PATCH v6 5/6] binfmt_*: scope path resolution of interpreters, Aleksa Sarai
                            • Re: [PATCH v6 5/6] binfmt_*: scope path resolution of interpreters, Andy Lutomirski
                      • Re: [PATCH v6 5/6] binfmt_*: scope path resolution of interpreters, Christian Brauner
      • Re: [PATCH v6 5/6] binfmt_*: scope path resolution of interpreters, Eric W. Biederman
        • Re: [PATCH v6 5/6] binfmt_*: scope path resolution of interpreters, Jann Horn via Containers
  • [PATCH v6 6/6] namei: resolveat(2) syscall, Aleksa Sarai
• [PATCHv3 00/27] kernel: Introduce Time Namespace, Dmitry Safonov via Containers
  • [PATCHv3 01/27] ns: Introduce Time Namespace, Dmitry Safonov via Containers
    • Re: [PATCHv3 01/27] ns: Introduce Time Namespace, Jann Horn via Containers
  • [PATCHv3 02/27] timens: Add timens_offsets, Dmitry Safonov via Containers
  • [PATCHv3 03/27] timens: Introduce CLOCK_MONOTONIC offsets, Dmitry Safonov via Containers
    • Re: [PATCHv3 03/27] timens: Introduce CLOCK_MONOTONIC offsets, Thomas Gleixner
  • [PATCHv3 04/27] timens: Introduce CLOCK_BOOTTIME offset, Dmitry Safonov via Containers
    • Re: [PATCHv3 04/27] timens: Introduce CLOCK_BOOTTIME offset, Cyrill Gorcunov
  • [PATCHv3 05/27] timerfd/timens: Take into account ns clock offsets, Dmitry Safonov via Containers
    • Re: [PATCHv3 05/27] timerfd/timens: Take into account ns clock offsets, Thomas Gleixner
      • Re: [PATCHv3 05/27] timerfd/timens: Take into account ns clock offsets, Andrei Vagin
  • [PATCHv3 06/27] posix-timers/timens: Take into account clock offsets, Dmitry Safonov via Containers
    • Re: [PATCHv3 06/27] posix-timers/timens: Take into account clock offsets, Thomas Gleixner
  • [PATCHv3 07/27] timens/kernel: Take into account timens clock offsets in clock_nanosleep, Dmitry Safonov via Containers
  • [PATCHv3 08/27] timens: Shift /proc/uptime, Dmitry Safonov via Containers
  • [PATCHv3 09/27] x86/vdso2c: Correct err messages on file opening, Dmitry Safonov via Containers
  • [PATCHv3 10/27] x86/vdso2c: Convert iterator to unsigned, Dmitry Safonov via Containers
  • [PATCHv3 11/27] x86/vdso/Makefile: Add vobjs32, Dmitry Safonov via Containers
  • [PATCHv3 12/27] x86/vdso: Restrict splitting VVAR VMA, Dmitry Safonov via Containers
    • Re: [PATCHv3 12/27] x86/vdso: Restrict splitting VVAR VMA, Jann Horn via Containers
      • Re: [PATCHv3 12/27] x86/vdso: Restrict splitting VVAR VMA, Dmitry Safonov
  • [PATCHv3 13/27] x86/vdso: Rename vdso_image {.data=>.text}, Dmitry Safonov via Containers
  • [PATCHv3 14/27] x86/vdso: Add offsets page in vvar, Dmitry Safonov via Containers
  • [PATCHv3 15/27] x86/vdso: Allocate timens vdso, Dmitry Safonov via Containers
    • Re: [PATCHv3 15/27] x86/vdso: Allocate timens vdso, Jann Horn via Containers
      • Re: [PATCHv3 15/27] x86/vdso: Allocate timens vdso, Dmitry Safonov
  • [PATCHv3 16/27] x86/vdso: Switch image on setns()/unshare()/clone(), Dmitry Safonov via Containers
    • Re: [PATCHv3 16/27] x86/vdso: Switch image on setns()/unshare()/clone(), Jann Horn via Containers
      • Re: [PATCHv3 16/27] x86/vdso: Switch image on setns()/unshare()/clone(), Dmitry Safonov
  • [PATCHv3 17/27] vdso: introduce timens_static_branch, Dmitry Safonov via Containers
  • [PATCHv3 18/27] timens: Add align for timens_offsets, Dmitry Safonov via Containers
  • [PATCHv3 19/27] timens/fs/proc: Introduce /proc/pid/timens_offsets, Dmitry Safonov via Containers
    • Re: [PATCHv3 19/27] timens/fs/proc: Introduce /proc/pid/timens_offsets, Jann Horn via Containers
      • Re: [PATCHv3 19/27] timens/fs/proc: Introduce /proc/pid/timens_offsets, Andrei Vagin
  • [PATCHv3 20/27] selftest/timens: Add Time Namespace test for supported clocks, Dmitry Safonov via Containers
  • [PATCHv3 21/27] selftest/timens: Add a test for timerfd, Dmitry Safonov via Containers
  • [PATCHv3 22/27] selftest/timens: Add a test for clock_nanosleep(), Dmitry Safonov via Containers
  • [PATCHv3 23/27] selftest/timens: Add procfs selftest, Dmitry Safonov via Containers
  • [PATCHv3 24/27] selftest/timens: Add timer offsets test, Dmitry Safonov via Containers
  • [PATCHv3 25/27] x86/vdso: Align VDSO functions by CPU L1 cache line, Dmitry Safonov via Containers
  • [PATCHv3 26/27] selftests: Add a simple perf test for clock_gettime(), Dmitry Safonov via Containers
  • [PATCHv3 27/27] selftest/timens: Check that a right vdso is mapped after fork and exec, Dmitry Safonov via Containers
• [PATCH ghau51/ghau40 v6 0/7] add support for audit container identifier, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v6 1/7] AUDIT_CONTAINER_OP message type basic support, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v6 2/7] AUDIT_CONTAINER_ID message type basic support, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v6 3/7] auditctl: add support for AUDIT_CONTID filter, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v6 4/7] add ausearch containerid support, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v6 5/7] start normalization containerid support, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v6 6/7] libaudit: add support to get the task audit container identifier, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v6 7/7] add support for audit_signal_info2, Richard Guy Briggs
• [PATCH ghak90 V6 00/10] audit: implement container identifier, Richard Guy Briggs
  • [PATCH ghak90 V6 01/10] audit: collect audit task parameters, Richard Guy Briggs
  • [PATCH ghak90 V6 02/10] audit: add container id, Richard Guy Briggs
    • Re: [PATCH ghak90 V6 02/10] audit: add container id, Tycho Andersen
      • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
        • Re: [PATCH ghak90 V6 02/10] audit: add container id, Tycho Andersen
          • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
            • Re: [PATCH ghak90 V6 02/10] audit: add container id, Tycho Andersen
              • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
                • Re: [PATCH ghak90 V6 02/10] audit: add container id, Serge E. Hallyn
                  • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
                    • Re: [PATCH ghak90 V6 02/10] audit: add container id, Tycho Andersen
                      • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
                        • Re: [PATCH ghak90 V6 02/10] audit: add container id, Richard Guy Briggs
                          • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
                            • Re: [PATCH ghak90 V6 02/10] audit: add container id, Steve Grubb
                              • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
                                • Re: [PATCH ghak90 V6 02/10] audit: add container id, Richard Guy Briggs
                        • Re: [PATCH ghak90 V6 02/10] audit: add container id, Richard Guy Briggs
                          • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
                          • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
                            • Re: [PATCH ghak90 V6 02/10] audit: add container id, Richard Guy Briggs
                              • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
                                • Re: [PATCH ghak90 V6 02/10] audit: add container id, Richard Guy Briggs
                    • Re: [PATCH ghak90 V6 02/10] audit: add container id, Richard Guy Briggs
                      • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
                        • Re: [PATCH ghak90 V6 02/10] audit: add container id, Richard Guy Briggs
                          • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
                            • Re: [PATCH ghak90 V6 02/10] audit: add container id, Richard Guy Briggs
                              • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
                                • Re: [PATCH ghak90 V6 02/10] audit: add container id, Eric W. Biederman
                                  • Re: [PATCH ghak90 V6 02/10] audit: add container id, Burn Alting
                                  • Re: [PATCH ghak90 V6 02/10] audit: add container id, James Bottomley
                              • Re: [PATCH ghak90 V6 02/10] audit: add container id, Eric W. Biederman
        • Re: [PATCH ghak90 V6 02/10] audit: add container id, Richard Guy Briggs
          • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
            • Re: [PATCH ghak90 V6 02/10] audit: add container id, Richard Guy Briggs
              • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
    • Re: [PATCH ghak90 V6 02/10] audit: add container id, Eric W. Biederman
  • [PATCH ghak90 V6 03/10] audit: read container ID of a process, Richard Guy Briggs
    • Re: [PATCH ghak90 V6 03/10] audit: read container ID of a process, Eric W. Biederman
      • Re: [PATCH ghak90 V6 03/10] audit: read container ID of a process, Richard Guy Briggs
  • [PATCH ghak90 V6 04/10] audit: log container info of syscalls, Richard Guy Briggs
    • Re: [PATCH ghak90 V6 04/10] audit: log container info of syscalls, Paul Moore
      • Re: [PATCH ghak90 V6 04/10] audit: log container info of syscalls, Ondrej Mosnacek
        • Re: [PATCH ghak90 V6 04/10] audit: log container info of syscalls, Richard Guy Briggs
          • Re: [PATCH ghak90 V6 04/10] audit: log container info of syscalls, Paul Moore
  • [PATCH ghak90 V6 05/10] audit: add contid support for signalling the audit daemon, Richard Guy Briggs
    • Re: [PATCH ghak90 V6 05/10] audit: add contid support for signalling the audit daemon, Ondrej Mosnacek
      • Re: [PATCH ghak90 V6 05/10] audit: add contid support for signalling the audit daemon, Paul Moore
        • Re: [PATCH ghak90 V6 05/10] audit: add contid support for signalling the audit daemon, Neil Horman
          • Re: [PATCH ghak90 V6 05/10] audit: add contid support for signalling the audit daemon, Ondrej Mosnacek
          • Re: [PATCH ghak90 V6 05/10] audit: add contid support for signalling the audit daemon, Paul Moore
        • Re: [PATCH ghak90 V6 05/10] audit: add contid support for signalling the audit daemon, Richard Guy Briggs
          • Re: [PATCH ghak90 V6 05/10] audit: add contid support for signalling the audit daemon, Paul Moore
      • Re: [PATCH ghak90 V6 05/10] audit: add contid support for signalling the audit daemon, Neil Horman
  • [PATCH ghak90 V6 06/10] audit: add support for non-syscall auxiliary records, Richard Guy Briggs
  • [PATCH ghak90 V6 07/10] audit: add containerid support for user records, Richard Guy Briggs
  • [PATCH ghak90 V6 08/10] audit: add containerid filtering, Richard Guy Briggs
    • Re: [PATCH ghak90 V6 08/10] audit: add containerid filtering, Paul Moore
      • Re: [PATCH ghak90 V6 08/10] audit: add containerid filtering, Richard Guy Briggs
        • Re: [PATCH ghak90 V6 08/10] audit: add containerid filtering, Paul Moore
          • Re: [PATCH ghak90 V6 08/10] audit: add containerid filtering, Richard Guy Briggs
            • Re: [PATCH ghak90 V6 08/10] audit: add containerid filtering, Paul Moore
              • Re: [PATCH ghak90 V6 08/10] audit: add containerid filtering, Richard Guy Briggs
  • [PATCH ghak90 V6 09/10] audit: add support for containerid to network namespaces, Richard Guy Briggs
    • Re: [PATCH ghak90 V6 09/10] audit: add support for containerid to network namespaces, Paul Moore
      • Re: [PATCH ghak90 V6 09/10] audit: add support for containerid to network namespaces, Richard Guy Briggs
        • Re: [PATCH ghak90 V6 09/10] audit: add support for containerid to network namespaces, Paul Moore
  • [PATCH ghak90 V6 10/10] audit: NETFILTER_PKT: record each container ID associated with a netNS, Richard Guy Briggs
  • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Richard Guy Briggs
  • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Neil Horman
    • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Paul Moore
      • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Neil Horman
      • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Paul Moore
        • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Steve Grubb
          • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Paul Moore
            • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Richard Guy Briggs
      • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Daniel Walsh
        • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Richard Guy Briggs
        • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Paul Moore
          • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Steve Grubb
            • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Richard Guy Briggs
              • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Daniel Walsh
                • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Paul Moore
                  • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Daniel Walsh
                    • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Paul Moore
              • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Paul Moore
• Truly clever customers choose our pharmacy because it's the best of all similar services!, Canadian-Pills-Online
• [PATCH ghau51/ghau40 v5 0/6] add support for audit container identifier, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v5 1/6] AUDIT_CONTAINER_OP message type basic support, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v5 2/6] AUDIT_CONTAINER_ID message type basic support, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v5 3/6] auditctl: add support for AUDIT_CONTID filter, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v5 4/6] add ausearch containerid support, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v5 5/6] start normalization containerid support, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v5 6/6] libaudit: add support to get the task audit container identifier, Richard Guy Briggs
• [PATCH ghak90 V5 00/10] audit: implement container identifier, Richard Guy Briggs
  • [PATCH ghak90 V5 01/10] audit: collect audit task parameters, Richard Guy Briggs
    • Re: [PATCH ghak90 V5 01/10] audit: collect audit task parameters, Neil Horman
    • Re: [PATCH ghak90 V5 01/10] audit: collect audit task parameters, Ondrej Mosnacek
  • [PATCH ghak90 V5 02/10] audit: add container id, Richard Guy Briggs
    • Re: [PATCH ghak90 V5 02/10] audit: add container id, Neil Horman
    • Re: [PATCH ghak90 V5 02/10] audit: add container id, Ondrej Mosnacek
      • Re: [PATCH ghak90 V5 02/10] audit: add container id, Richard Guy Briggs
  • [PATCH ghak90 V5 03/10] audit: read container ID of a process, Richard Guy Briggs
    • Re: [PATCH ghak90 V5 03/10] audit: read container ID of a process, Neil Horman
      • Re: [PATCH ghak90 V5 03/10] audit: read container ID of a process, Richard Guy Briggs
        • Re: [PATCH ghak90 V5 03/10] audit: read container ID of a process, Neil Horman
          • Re: [PATCH ghak90 V5 03/10] audit: read container ID of a process, Richard Guy Briggs
    • Re: [PATCH ghak90 V5 03/10] audit: read container ID of a process, Ondrej Mosnacek
  • [PATCH ghak90 V5 04/10] audit: log container info of syscalls, Richard Guy Briggs
    • Re: [PATCH ghak90 V5 04/10] audit: log container info of syscalls, Neil Horman
    • Re: [PATCH ghak90 V5 04/10] audit: log container info of syscalls, Ondrej Mosnacek
      • Re: [PATCH ghak90 V5 04/10] audit: log container info of syscalls, Richard Guy Briggs
  • [PATCH ghak90 V5 05/10] audit: add containerid support for ptrace and signals, Richard Guy Briggs
    • Re: [PATCH ghak90 V5 05/10] audit: add containerid support for ptrace and signals, Neil Horman
      • Re: [PATCH ghak90 V5 05/10] audit: add containerid support for ptrace and signals, Richard Guy Briggs
    • Re: [PATCH ghak90 V5 05/10] audit: add containerid support for ptrace and signals, Ondrej Mosnacek
      • Re: [PATCH ghak90 V5 05/10] audit: add containerid support for ptrace and signals, Richard Guy Briggs
        • Re: [PATCH ghak90 V5 05/10] audit: add containerid support for ptrace and signals, Richard Guy Briggs
  • [PATCH ghak90 V5 06/10] audit: add support for non-syscall auxiliary records, Richard Guy Briggs
    • Re: [PATCH ghak90 V5 06/10] audit: add support for non-syscall auxiliary records, Neil Horman
    • Re: [PATCH ghak90 V5 06/10] audit: add support for non-syscall auxiliary records, Ondrej Mosnacek
    • Re: [PATCH ghak90 V5 06/10] audit: add support for non-syscall auxiliary records, Paul Moore
      • Re: [PATCH ghak90 V5 06/10] audit: add support for non-syscall auxiliary records, Richard Guy Briggs
        • Re: [PATCH ghak90 V5 06/10] audit: add support for non-syscall auxiliary records, Paul Moore
          • Re: [PATCH ghak90 V5 06/10] audit: add support for non-syscall auxiliary records, Richard Guy Briggs
  • [PATCH ghak90 V5 07/10] audit: add containerid support for user records, Richard Guy Briggs
    • Re: [PATCH ghak90 V5 07/10] audit: add containerid support for user records, Neil Horman
    • Re: [PATCH ghak90 V5 07/10] audit: add containerid support for user records, Ondrej Mosnacek
  • [PATCH ghak90 V5 08/10] audit: add containerid filtering, Richard Guy Briggs
    • Re: [PATCH ghak90 V5 08/10] audit: add containerid filtering, Ondrej Mosnacek
      • Re: [PATCH ghak90 V5 08/10] audit: add containerid filtering, Richard Guy Briggs
        • Re: [PATCH ghak90 V5 08/10] audit: add containerid filtering, Ondrej Mosnacek
          • Re: [PATCH ghak90 V5 08/10] audit: add containerid filtering, Richard Guy Briggs
    • Re: [PATCH ghak90 V5 08/10] audit: add containerid filtering, Neil Horman
  • [PATCH ghak90 V5 09/10] audit: add support for containerid to network namespaces, Richard Guy Briggs
    • Re: [PATCH ghak90 V5 09/10] audit: add support for containerid to network namespaces, Neil Horman
    • Re: [PATCH ghak90 V5 09/10] audit: add support for containerid to network namespaces, Ondrej Mosnacek
      • Re: [PATCH ghak90 V5 09/10] audit: add support for containerid to network namespaces, Richard Guy Briggs
        • Re: [PATCH ghak90 V5 09/10] audit: add support for containerid to network namespaces, Ondrej Mosnacek
        • Re: [PATCH ghak90 V5 09/10] audit: add support for containerid to network namespaces, Paul Moore
          • Re: [PATCH ghak90 V5 09/10] audit: add support for containerid to network namespaces, Richard Guy Briggs
            • Re: [PATCH ghak90 V5 09/10] audit: add support for containerid to network namespaces, Paul Moore
              • Re: [PATCH ghak90 V5 09/10] audit: add support for containerid to network namespaces, Neil Horman
            • Re: [PATCH ghak90 V5 09/10] audit: add support for containerid to network namespaces, Neil Horman
        • Re: [PATCH ghak90 V5 09/10] audit: add support for containerid to network namespaces, Neil Horman
    • Re: [PATCH ghak90 V5 09/10] audit: add support for containerid to network namespaces, Paul Moore
      • Re: [PATCH ghak90 V5 09/10] audit: add support for containerid to network namespaces, Richard Guy Briggs
      • Re: [PATCH ghak90 V5 09/10] audit: add support for containerid to network namespaces, Neil Horman
        • Re: [PATCH ghak90 V5 09/10] audit: add support for containerid to network namespaces, Paul Moore
          • Re: [PATCH ghak90 V5 09/10] audit: add support for containerid to network namespaces, Neil Horman
        • Re: [PATCH ghak90 V5 09/10] audit: add support for containerid to network namespaces, Richard Guy Briggs
          • Re: [PATCH ghak90 V5 09/10] audit: add support for containerid to network namespaces, Paul Moore
          • Re: [PATCH ghak90 V5 09/10] audit: add support for containerid to network namespaces, Neil Horman
  • [PATCH ghak90 V5 10/10] audit: NETFILTER_PKT: record each container ID associated with a netNS, Richard Guy Briggs
    • Re: [PATCH ghak90 V5 10/10] audit: NETFILTER_PKT: record each container ID associated with a netNS, Neil Horman
    • Re: [PATCH ghak90 V5 10/10] audit: NETFILTER_PKT: record each container ID associated with a netNS, Ondrej Mosnacek
    • Re: [PATCH ghak90 V5 10/10] audit: NETFILTER_PKT: record each container ID associated with a netNS, Paul Moore
      • Re: [PATCH ghak90 V5 10/10] audit: NETFILTER_PKT: record each container ID associated with a netNS, Richard Guy Briggs
  • Re: [PATCH ghak90 V5 00/10] audit: implement container identifier, Richard Guy Briggs
• [PATCH RESEND v5 0/5] namei: vfs flags to restrict path resolution, Aleksa Sarai
  • [PATCH RESEND v5 1/5] namei: split out nd->dfd handling to dirfd_path_init, Aleksa Sarai
  • [PATCH RESEND v5 2/5] namei: O_BENEATH-style path resolution flags, Aleksa Sarai
    • Message not available
      • Message not available
        • Message not available
          • Re: [PATCH RESEND v5 2/5] namei: O_BENEATH-style path resolution flags, Aleksa Sarai
  • [PATCH RESEND v5 3/5] namei: O_THISROOT: chroot-like path resolution, Aleksa Sarai
  • [PATCH RESEND v5 4/5] namei: aggressively check for nd->root escape on ".." resolution, Aleksa Sarai
  • [PATCH RESEND v5 5/5] binfmt_*: scope path resolution of interpreters, Aleksa Sarai
  • <Possible follow-ups>
  • [PATCH RESEND v5 0/5] namei: vfs flags to restrict path resolution, Aleksa Sarai
    • [PATCH RESEND v5 1/5] namei: split out nd->dfd handling to dirfd_path_init, Aleksa Sarai
    • [PATCH RESEND v5 2/5] namei: O_BENEATH-style path resolution flags, Aleksa Sarai
    • [PATCH RESEND v5 3/5] namei: O_THISROOT: chroot-like path resolution, Aleksa Sarai
    • [PATCH RESEND v5 4/5] namei: aggressively check for nd->root escape on ".." resolution, Aleksa Sarai
    • [PATCH RESEND v5 5/5] binfmt_*: scope path resolution of interpreters, Aleksa Sarai
    • Re: [PATCH RESEND v5 0/5] namei: vfs flags to restrict path resolution, Andy Lutomirski
      • Re: [PATCH RESEND v5 0/5] namei: vfs flags to restrict path resolution, Aleksa Sarai
        • Re: [PATCH RESEND v5 0/5] namei: vfs flags to restrict path resolution, Kees Cook
          • Re: [PATCH RESEND v5 0/5] namei: vfs flags to restrict path resolution, Christian Brauner
          • Re: [PATCH RESEND v5 0/5] namei: vfs flags to restrict path resolution, Aleksa Sarai
            • Re: [PATCH RESEND v5 0/5] namei: vfs flags to restrict path resolution, Adam Borowski
            • Re: [PATCH RESEND v5 0/5] namei: vfs flags to restrict path resolution, Aleksa Sarai
• Re: [PATCH 2/2] seccomp.2: document userspace notification, Michael Kerrisk (man-pages)
  • Re: [PATCH 2/2] seccomp.2: document userspace notification, Michael Kerrisk (man-pages)
    • Re: [PATCH 2/2] seccomp.2: document userspace notification, Tycho Andersen
      • Re: [PATCH 2/2] seccomp.2: document userspace notification, Michael Kerrisk (man-pages)
  • Re: [PATCH 2/2] seccomp.2: document userspace notification, Tycho Andersen
    • Re: [PATCH 2/2] seccomp.2: document userspace notification, Michael Kerrisk (man-pages)
      • Re: [PATCH 2/2] seccomp.2: document userspace notification, Tycho Andersen
        • Re: [PATCH 2/2] seccomp.2: document userspace notification, Michael Kerrisk (man-pages)
• [LSF/MM TOPIC] VFS rename fences/zones/whatuwanacallit, Amir Goldstein
  • Re: [LSF/MM TOPIC] VFS rename fences/zones/whatuwanacallit, Al Viro
    • Re: [LSF/MM TOPIC] VFS rename fences/zones/whatuwanacallit, Amir Goldstein
• Converting a Docker container to a Runc container -> Read-only file system, Philip Rhoades
  • Re: Converting a Docker container to a Runc container -> Read-only file system, Aleksa Sarai
    • Re: Converting a Docker container to a Runc container -> Read-only file system, Philip Rhoades
• Re: [RFC PATCH 00/27] Containers and using authenticated filesystems, Eric W. Biederman
  • Message not available
    • Re: [RFC PATCH 00/27] Containers and using authenticated filesystems, David Howells
      • Re: [RFC PATCH 00/27] Containers and using authenticated filesystems, Paul Moore
      • Re: [RFC PATCH 00/27] Containers and using authenticated filesystems, Steve French
  • Re: [RFC PATCH 00/27] Containers and using authenticated filesystems, Christian Brauner
• Re: [RFC PATCH 02/27] containers: Implement containers as kernel objects, James Bottomley
  • Message not available
    • Message not available
      • Re: [RFC PATCH 02/27] containers: Implement containers as kernel objects, David Howells
        • Re: [RFC PATCH 02/27] containers: Implement containers as kernel objects, James Bottomley
          • Re: [RFC PATCH 02/27] containers: Implement containers as kernel objects, Ian Kent
            • Re: [RFC PATCH 02/27] containers: Implement containers as kernel objects, James Bottomley
              • Re: [RFC PATCH 02/27] containers: Implement containers as kernel objects, Ian Kent
              • Re: [RFC PATCH 02/27] containers: Implement containers as kernel objects, Paul Moore
  • <Possible follow-ups>
  • Re: [RFC PATCH 02/27] containers: Implement containers as kernel objects, Ian Kent
    • Re: [RFC PATCH 02/27] containers: Implement containers as kernel objects, Christian Brauner
      • Re: [RFC PATCH 02/27] containers: Implement containers as kernel objects, Ian Kent
  • Re: [RFC PATCH 02/27] containers: Implement containers as kernel objects, Trond Myklebust
• [PATCH v5 0/5] namei: vfs flags to restrict path resolution, Aleksa Sarai
  • [PATCH v5 1/5] namei: split out nd->dfd handling to dirfd_path_init, Aleksa Sarai
  • [PATCH v5 3/5] namei: O_THISROOT: chroot-like path resolution, Aleksa Sarai
  • [PATCH v5 5/5] binfmt_*: scope path resolution of interpreters, Aleksa Sarai
  • [PATCH v5 2/5] namei: O_BENEATH-style path resolution flags, Aleksa Sarai
  • [PATCH v5 4/5] namei: aggressively check for nd->root escape on ".." resolution, Aleksa Sarai
• [PATCH 00/32] kernel: Introduce Time Namespace, Dmitry Safonov via Containers
  • [PATCH 01/32] ns: Introduce Time Namespace, Dmitry Safonov via Containers
  • [PATCH 02/32] timens: Add timens_offsets, Dmitry Safonov via Containers
  • [PATCH 03/32] timens: Introduce CLOCK_MONOTONIC offsets, Dmitry Safonov via Containers
    • Re: [PATCH 03/32] timens: Introduce CLOCK_MONOTONIC offsets, Thomas Gleixner
      • Re: [PATCH 03/32] timens: Introduce CLOCK_MONOTONIC offsets, Thomas Gleixner
  • [PATCH 04/32] timens: Introduce CLOCK_BOOTTIME offset, Dmitry Safonov via Containers
  • [PATCH 05/32] timerfd/timens: Take into account ns clock offsets, Dmitry Safonov via Containers
    • Re: [PATCH 05/32] timerfd/timens: Take into account ns clock offsets, Cyrill Gorcunov
      • Re: [PATCH 05/32] timerfd/timens: Take into account ns clock offsets, Cyrill Gorcunov
      • Re: [PATCH 05/32] timerfd/timens: Take into account ns clock offsets, Andrei Vagin
  • [PATCH 06/32] posix-timers/timens: Take into account clock offsets, Dmitry Safonov via Containers
  • [PATCH 07/32] timens/kernel: Take into account timens clock offsets in clock_nanosleep, Dmitry Safonov via Containers
    • Re: [PATCH 07/32] timens/kernel: Take into account timens clock offsets in clock_nanosleep, Thomas Gleixner
  • [PATCH 08/32] timens: Shift /proc/uptime, Dmitry Safonov via Containers
  • [PATCH 09/32] x86/vdso2c: Correct err messages on file opening, Dmitry Safonov via Containers
  • [PATCH 10/32] x86/vdso2c: Convert iterator to unsigned, Dmitry Safonov via Containers
  • [PATCH 11/32] x86/vdso/Makefile: Add vobjs32, Dmitry Safonov via Containers
  • [PATCH 12/32] x86/vdso/timens: Add offsets page in vvar, Dmitry Safonov via Containers
  • [PATCH 13/32] x86/vdso: Build timens .so(s), Dmitry Safonov via Containers
  • [PATCH 14/32] x86/VDSO: Build VDSO with -ffunction-sections, Dmitry Safonov via Containers
  • [PATCH 15/32] x86/vdso2c: Optionally produce linker script for vdso entries, Dmitry Safonov via Containers
  • [PATCH 16/32] x86/vdso: Generate vdso{,32}-timens.lds, Dmitry Safonov via Containers
    • Re: [PATCH 16/32] x86/vdso: Generate vdso{,32}-timens.lds, Rasmus Villemoes
      • Re: [PATCH 16/32] x86/vdso: Generate vdso{,32}-timens.lds, Dmitry Safonov
      • Re: [PATCH 16/32] x86/vdso: Generate vdso{,32}-timens.lds, Thomas Gleixner
        • Re: [PATCH 16/32] x86/vdso: Generate vdso{,32}-timens.lds, Dmitry Safonov
        • Re: [PATCH 16/32] x86/vdso: Generate vdso{,32}-timens.lds, Andrei Vagin
          • [PATCH RFC] x86/asm: Introduce static_retcall(s), Andrei Vagin
          • [PATCH RFC] vdso: introduce timens_static_branch, Andrei Vagin
  • [PATCH 17/32] x86/vdso2c: Sort vdso entries by addresses for linker script, Dmitry Safonov via Containers
  • [PATCH 18/32] x86/vdso.lds: Align !timens (host's) vdso.so entries, Dmitry Safonov via Containers
  • [PATCH 19/32] x86/vdso2c: Align LOCAL symbols between vdso{-timens, }.so, Dmitry Safonov via Containers
  • [PATCH 20/32] x86/vdso: Initialize timens 64-bit vdso, Dmitry Safonov via Containers
  • [PATCH 21/32] x86/vdso: Switch image on setns()/unshare()/clone(), Dmitry Safonov via Containers
  • [PATCH 22/32] timens: Add align for timens_offsets, Dmitry Safonov via Containers
  • [PATCH 23/32] timens/fs/proc: Introduce /proc/pid/timens_offsets, Dmitry Safonov via Containers
  • [PATCH 24/32] selftest/timens: Add Time Namespace test for supported clocks, Dmitry Safonov via Containers
  • [PATCH 25/32] selftest/timens: Add a test for timerfd, Dmitry Safonov via Containers
  • [PATCH 26/32] selftest/timens: Add a test for clock_nanosleep(), Dmitry Safonov via Containers
  • [PATCH 27/32] selftest/timens: Add procfs selftest, Dmitry Safonov via Containers
  • [PATCH 28/32] selftest/timens: Add timer offsets test, Dmitry Safonov via Containers
  • [PATCH 29/32] selftests: Add a simple perf test for clock_gettime(), Dmitry Safonov via Containers
  • [PATCH 30/32] selftest/timens: Check that a right vdso is mapped after fork and exec, Dmitry Safonov via Containers
  • [PATCH 31/32] x86/vdso: Align VDSO functions by CPU L1 cache line, Dmitry Safonov via Containers
  • [PATCH 32/32] x86/vdso: Restrict splitting VVAR VMA, Dmitry Safonov via Containers
• A recent survey proven that the majority of online customers choose our pharmacy!, Canadian-Pharmacy
• [vfs] cbc815d9ce: BUG:unable_to_handle_kernel, kernel test robot
• [PATCH v10 0/4] seccomp trap to userspace, Tycho Andersen
  • [PATCH v10 1/4] seccomp: hoist struct seccomp_data recalculation higher, Tycho Andersen
    • Re: [PATCH v10 1/4] seccomp: hoist struct seccomp_data recalculation higher, Kees Cook
  • [PATCH v10 2/4] seccomp: switch system call argument type to void *, Tycho Andersen
    • Re: [PATCH v10 2/4] seccomp: switch system call argument type to void *, Kees Cook
  • [PATCH v10 4/4] samples: add an example of seccomp user trap, Tycho Andersen
    • Re: [PATCH v10 4/4] samples: add an example of seccomp user trap, Serge E. Hallyn
      • Re: [PATCH v10 4/4] samples: add an example of seccomp user trap, Kees Cook
  • [PATCH v10 3/4] seccomp: add a return code to trap to userspace, Tycho Andersen
    • Re: [PATCH v10 3/4] seccomp: add a return code to trap to userspace, Kees Cook
• [PATCH v9 0/4] seccomp trap to userspace, Tycho Andersen
  • [PATCH v9 1/4] seccomp: hoist struct seccomp_data recalculation higher, Tycho Andersen
    • Re: [PATCH v9 1/4] seccomp: hoist struct seccomp_data recalculation higher, Serge E. Hallyn
  • [PATCH v9 2/4] seccomp: switch system call argument type to void *, Tycho Andersen
    • Re: [PATCH v9 2/4] seccomp: switch system call argument type to void *, Serge E. Hallyn
      • Re: [PATCH v9 2/4] seccomp: switch system call argument type to void *, Paul Moore
    • Re: [PATCH v9 2/4] seccomp: switch system call argument type to void *, kbuild test robot
      • Re: [PATCH v9 2/4] seccomp: switch system call argument type to void *, Tycho Andersen
        • Re: [PATCH v9 2/4] seccomp: switch system call argument type to void *, Tycho Andersen
  • [PATCH v9 3/4] seccomp: add a return code to trap to userspace, Tycho Andersen
    • Re: [PATCH v9 3/4] seccomp: add a return code to trap to userspace, Serge E. Hallyn
      • Re: [PATCH v9 3/4] seccomp: add a return code to trap to userspace, Tycho Andersen
        • Re: [PATCH v9 3/4] seccomp: add a return code to trap to userspace, Serge E. Hallyn
  • [PATCH v9 4/4] samples: add an example of seccomp user trap, Tycho Andersen
• Announcing LXC, LXD and LXCFS 3.0.3 bugfix releases, Stéphane Graber
• [PATCH v4 0/4] namei: O_* flags to restrict path resolution, Aleksa Sarai
  • [PATCH v4 1/4] namei: split out nd->dfd handling to dirfd_path_init, Aleksa Sarai
  • [PATCH v4 2/4] namei: O_BENEATH-style path resolution flags, Aleksa Sarai
    • Re: [PATCH v4 2/4] namei: O_BENEATH-style path resolution flags, Jürg Billeter
      • Re: [PATCH v4 2/4] namei: O_BENEATH-style path resolution flags, Andy Lutomirski
        • Re: [PATCH v4 2/4] namei: O_BENEATH-style path resolution flags, Aleksa Sarai
          • Re: [PATCH v4 2/4] namei: O_BENEATH-style path resolution flags, Aleksa Sarai
      • Re: [PATCH v4 2/4] namei: O_BENEATH-style path resolution flags, Aleksa Sarai
  • [PATCH v4 3/4] namei: O_THISROOT: chroot-like path resolution, Aleksa Sarai
  • [PATCH v4 4/4] namei: aggressively check for nd->root escape on ".." resolution, Aleksa Sarai
• [GIT PULL] namespace fixes for v4.20-rc2, Eric W. Biederman
  • Re: [GIT PULL] namespace fixes for v4.20-rc2, pr-tracker-bot
  • Re: [GIT PULL] namespace fixes for v4.20-rc2, pr-tracker-bot
    • Re: [GIT PULL] namespace fixes for v4.20-rc2, Konstantin Ryabitsev
• [RFC PATCH 0/6] shiftfs fixes and enhancements, Seth Forshee
  • [RFC PATCH 2/6] shiftfs: map inodes to lower fs inodes instead of dentries, Seth Forshee
  • [RFC PATCH 1/6] shiftfs: uid/gid shifting bind mount, Seth Forshee
  • [RFC PATCH 3/6] shiftfs: copy inode attrs up from underlying fs, Seth Forshee
  • [RFC PATCH 5/6] shiftfs: add support for posix acls, Seth Forshee
  • [RFC PATCH 4/6] shiftfs: translate uids using s_user_ns from lower fs, Seth Forshee
  • [RFC PATCH 6/6] shiftfs: support nested shiftfs mounts, Seth Forshee
    • Re: [RFC PATCH 6/6] shiftfs: support nested shiftfs mounts, Amir Goldstein
      • Re: [RFC PATCH 6/6] shiftfs: support nested shiftfs mounts, Seth Forshee
        • Re: [RFC PATCH 6/6] shiftfs: support nested shiftfs mounts, Amir Goldstein
          • Re: [RFC PATCH 6/6] shiftfs: support nested shiftfs mounts, Seth Forshee
          • Re: [RFC PATCH 6/6] shiftfs: support nested shiftfs mounts, James Bottomley
  • Re: [RFC PATCH 0/6] shiftfs fixes and enhancements, Amir Goldstein
    • Re: [RFC PATCH 0/6] shiftfs fixes and enhancements, Seth Forshee
• [PATCH v8 0/2] seccomp trap to userspace, Tycho Andersen
  • [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Tycho Andersen
    • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Oleg Nesterov
      • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Tycho Andersen
        • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Oleg Nesterov
          • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Tycho Andersen
            • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Oleg Nesterov
              • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Tycho Andersen
    • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Oleg Nesterov
      • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Tycho Andersen
        • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Oleg Nesterov
          • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Oleg Nesterov
            • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Tycho Andersen
              • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Kees Cook
                • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Oleg Nesterov
        • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Kees Cook
    • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Kees Cook
      • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Tycho Andersen
        • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Kees Cook
          • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Tycho Andersen
            • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Kees Cook
              • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Tycho Andersen
                • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Kees Cook
    • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Oleg Nesterov
      • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Tycho Andersen
        • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Oleg Nesterov
          • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Tycho Andersen
    • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Oleg Nesterov
      • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Tycho Andersen
    • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Tycho Andersen
      • Re: [PATCH v8 1/2] seccomp: add a return code to trap to userspace, Oleg Nesterov
  • [PATCH v8 2/2] samples: add an example of seccomp user trap, Tycho Andersen
    • Re: [PATCH v8 2/2] samples: add an example of seccomp user trap, Serge E. Hallyn
      • Re: [PATCH v8 2/2] samples: add an example of seccomp user trap, Tycho Andersen
• Become our customer and save big money still buying most effective and popular drugs!, 24-7-Drugstore
• [PATCH v6 0/1] ns: introduce binfmt_misc namespace, Laurent Vivier
  • [PATCH v6 1/1] ns: add binfmt_misc to the user namespace, Laurent Vivier
    • Re: [PATCH v6 1/1] ns: add binfmt_misc to the user namespace, Rasmus Villemoes
      • Re: [PATCH v6 1/1] ns: add binfmt_misc to the user namespace, Laurent Vivier
    • Re: [PATCH v6 1/1] ns: add binfmt_misc to the user namespace, Andrei Vagin
      • Re: [PATCH v6 1/1] ns: add binfmt_misc to the user namespace, Laurent Vivier
        • Re: [PATCH v6 1/1] ns: add binfmt_misc to the user namespace, Laurent Vivier
          • Re: [PATCH v6 1/1] ns: add binfmt_misc to the user namespace, Jann Horn via Containers
  • Re: [PATCH v6 0/1] ns: introduce binfmt_misc namespace, Laurent Vivier
    • Re: [PATCH v6 0/1] ns: introduce binfmt_misc namespace, James Bottomley
      • Re: [PATCH v6 0/1] ns: introduce binfmt_misc namespace, Jann Horn via Containers
        • Re: [PATCH v6 0/1] ns: introduce binfmt_misc namespace, Laurent Vivier
          • Re: [PATCH v6 0/1] ns: introduce binfmt_misc namespace, Eric W. Biederman
            • Re: [PATCH v6 0/1] ns: introduce binfmt_misc namespace, Laurent Vivier
              • Re: [PATCH v6 0/1] ns: introduce binfmt_misc namespace, Laurent Vivier
        • Re: [PATCH v6 0/1] ns: introduce binfmt_misc namespace, James Bottomley
          • Re: [PATCH v6 0/1] ns: introduce binfmt_misc namespace, Jann Horn via Containers
• [RFC v5 0/1] ns: introduce binfmt_misc namespace, Laurent Vivier
  • [RFC v5 1/1] ns: add binfmt_misc to the user namespace, Laurent Vivier
    • Re: [RFC v5 1/1] ns: add binfmt_misc to the user namespace, Jann Horn via Containers
      • Re: [RFC v5 1/1] ns: add binfmt_misc to the user namespace, Laurent Vivier
        • Re: [RFC v5 1/1] ns: add binfmt_misc to the user namespace, Jann Horn via Containers
    • Re: [RFC v5 1/1] ns: add binfmt_misc to the user namespace, Tycho Andersen
      • Re: [RFC v5 1/1] ns: add binfmt_misc to the user namespace, Laurent Vivier
        • Re: [RFC v5 1/1] ns: add binfmt_misc to the user namespace, Aleksa Sarai
        • Re: [RFC v5 1/1] ns: add binfmt_misc to the user namespace, Laurent Vivier
    • Re: [RFC v5 1/1] ns: add binfmt_misc to the user namespace, Kirill Tkhai
      • Re: [RFC v5 1/1] ns: add binfmt_misc to the user namespace, Laurent Vivier
        • Re: [RFC v5 1/1] ns: add binfmt_misc to the user namespace, Jann Horn via Containers
          • Re: [RFC v5 1/1] ns: add binfmt_misc to the user namespace, Laurent Vivier
            • Re: [RFC v5 1/1] ns: add binfmt_misc to the user namespace, Jann Horn via Containers
        • Re: [RFC v5 1/1] ns: add binfmt_misc to the user namespace, Kirill Tkhai
          • Re: [RFC v5 1/1] ns: add binfmt_misc to the user namespace, Laurent Vivier
• [PATCH v3 0/3] namei: implement various lookup restriction AT_* flags, Aleksa Sarai
  • [PATCH v3 1/3] namei: implement O_BENEATH-style AT_* flags, Aleksa Sarai
    • Re: [PATCH v3 1/3] namei: implement O_BENEATH-style AT_* flags, Al Viro
      • Re: [PATCH v3 1/3] namei: implement O_BENEATH-style AT_* flags, Al Viro
        • Re: [PATCH v3 1/3] namei: implement O_BENEATH-style AT_* flags, Aleksa Sarai
      • Re: [PATCH v3 1/3] namei: implement O_BENEATH-style AT_* flags, Aleksa Sarai
  • [PATCH v3 2/3] namei: implement AT_THIS_ROOT chroot-like path resolution, Aleksa Sarai
  • [PATCH v3 3/3] namei: aggressively check for nd->root escape on ".." resolution, Aleksa Sarai
    • Re: [PATCH v3 3/3] namei: aggressively check for nd->root escape on ".." resolution, Jann Horn via Containers
      • Re: [PATCH v3 3/3] namei: aggressively check for nd->root escape on ".." resolution, Aleksa Sarai
        • Re: [PATCH v3 3/3] namei: aggressively check for nd->root escape on ".." resolution, Jann Horn via Containers
        • Re: [PATCH v3 3/3] namei: aggressively check for nd->root escape on ".." resolution, Al Viro
          • Re: [PATCH v3 3/3] namei: aggressively check for nd->root escape on ".." resolution, Aleksa Sarai
            • Re: [PATCH v3 3/3] namei: aggressively check for nd->root escape on ".." resolution, Al Viro
              • Re: [PATCH v3 3/3] namei: aggressively check for nd->root escape on ".." resolution, Aleksa Sarai
  • Re: [PATCH v3 0/3] namei: implement various lookup restriction AT_* flags, Aleksa Sarai
• [PATCH v2 0/3] namei: implement various lookup restriction AT_* flags, Aleksa Sarai
  • [PATCH v2 0/3] namei: implement various lookup restriction AT_* flags, Aleksa Sarai
  • [PATCH v2 1/3] namei: implement O_BENEATH-style AT_* flags, Aleksa Sarai
    • Re: [PATCH v2 1/3] namei: implement O_BENEATH-style AT_* flags, Andy Lutomirski
      • Re: [PATCH v2 1/3] namei: implement O_BENEATH-style AT_* flags, Aleksa Sarai
        • Re: [PATCH v2 1/3] namei: implement O_BENEATH-style AT_* flags, Aleksa Sarai
        • Re: [PATCH v2 1/3] namei: implement O_BENEATH-style AT_* flags, Andy Lutomirski
• [RFC v4 0/1] ns: introduce binfmt_misc namespace, Laurent Vivier
  • [RFC v4 1/1] ns: add binfmt_misc to the user namespace, Laurent Vivier
    • Re: [RFC v4 1/1] ns: add binfmt_misc to the user namespace, Serge E. Hallyn
      • Re: [RFC v4 1/1] ns: add binfmt_misc to the user namespace, Laurent Vivier
    • Re: [RFC v4 1/1] ns: add binfmt_misc to the user namespace, Andrei Vagin
    • Re: [RFC v4 1/1] ns: add binfmt_misc to the user namespace, Jann Horn via Containers
      • Re: [RFC v4 1/1] ns: add binfmt_misc to the user namespace, Laurent Vivier
• Re: [PATCH 1/3] namei: implement O_BENEATH-style AT_* flags, Christian Brauner
• [RFC v3 0/1] ns: introduce binfmt_misc namespace, Laurent Vivier
  • [RFC v3 1/1] ns: add binfmt_misc to the user namespace, Laurent Vivier
    • Re: [RFC v3 1/1] ns: add binfmt_misc to the user namespace, Andrei Vagin
      • Re: [RFC v3 1/1] ns: add binfmt_misc to the user namespace, Jann Horn via Containers
• [RFC v2 v2 0/1] ns: introduce binfmt_misc namespace, Laurent Vivier
  • [RFC v2 v2 1/1] ns: add binfmt_misc to the mount namespace, Laurent Vivier
    • Re: [RFC v2 v2 1/1] ns: add binfmt_misc to the mount namespace, Eric W. Biederman
      • Re: [RFC v2 v2 1/1] ns: add binfmt_misc to the mount namespace, Jann Horn via Containers
  • Re: [RFC v2 v2 0/1] ns: introduce binfmt_misc namespace, James Bottomley
    • Re: [RFC v2 v2 0/1] ns: introduce binfmt_misc namespace, Laurent Vivier
      • Re: [RFC v2 v2 0/1] ns: introduce binfmt_misc namespace, James Bottomley
• Re: [PATCH 2/3] namei: implement AT_THIS_ROOT chroot-like path resolution, Aleksa Sarai
  • Re: [PATCH 2/3] namei: implement AT_THIS_ROOT chroot-like path resolution, Andy Lutomirski
  • Re: [PATCH 2/3] namei: implement AT_THIS_ROOT chroot-like path resolution, Florian Weimer
    • Re: [PATCH 2/3] namei: implement AT_THIS_ROOT chroot-like path resolution, Christian Brauner
  • <Possible follow-ups>
  • Re: [PATCH 2/3] namei: implement AT_THIS_ROOT chroot-like path resolution, Aleksa Sarai
    • Re: [PATCH 2/3] namei: implement AT_THIS_ROOT chroot-like path resolution, Christian Brauner
    • Re: [PATCH 2/3] namei: implement AT_THIS_ROOT chroot-like path resolution, Jann Horn via Containers
      • Re: [PATCH 2/3] namei: implement AT_THIS_ROOT chroot-like path resolution, Aleksa Sarai
        • Re: [PATCH 2/3] namei: implement AT_THIS_ROOT chroot-like path resolution, Jann Horn via Containers
          • Re: [PATCH 2/3] namei: implement AT_THIS_ROOT chroot-like path resolution, Aleksa Sarai
            • Re: [PATCH 2/3] namei: implement AT_THIS_ROOT chroot-like path resolution, Jann Horn via Containers
  • Re: [PATCH 2/3] namei: implement AT_THIS_ROOT chroot-like path resolution, Christian Brauner
• Re: [PATCH 0/3] namei: implement various scoping AT_* flags, James Morris
  • <Possible follow-ups>
  • RE: [PATCH 0/3] namei: implement various scoping AT_* flags, David Laight
• [PATCH v7 0/6] seccomp trap to userspace, Tycho Andersen
  • [PATCH v7 2/6] seccomp: make get_nth_filter available outside of CHECKPOINT_RESTORE, Tycho Andersen
    • Re: [PATCH v7 2/6] seccomp: make get_nth_filter available outside of CHECKPOINT_RESTORE, Jann Horn via Containers
    • Re: [PATCH v7 2/6] seccomp: make get_nth_filter available outside of CHECKPOINT_RESTORE, Kees Cook
    • Re: [PATCH v7 2/6] seccomp: make get_nth_filter available outside of CHECKPOINT_RESTORE, Christian Brauner
  • [PATCH v7 1/6] seccomp: add a return code to trap to userspace, Tycho Andersen
    • Re: [PATCH v7 1/6] seccomp: add a return code to trap to userspace, Kees Cook
      • Re: [PATCH v7 1/6] seccomp: add a return code to trap to userspace, Tycho Andersen
        • Re: [PATCH v7 1/6] seccomp: add a return code to trap to userspace, Kees Cook
          • Re: [PATCH v7 1/6] seccomp: add a return code to trap to userspace, Tycho Andersen
        • Re: [PATCH v7 1/6] seccomp: add a return code to trap to userspace, Christian Brauner
          • Re: [PATCH v7 1/6] seccomp: add a return code to trap to userspace, Tycho Andersen
            • Re: [PATCH v7 1/6] seccomp: add a return code to trap to userspace, Christian Brauner
              • Re: [PATCH v7 1/6] seccomp: add a return code to trap to userspace, Tycho Andersen
      • Re: [PATCH v7 1/6] seccomp: add a return code to trap to userspace, Tycho Andersen
        • Re: [PATCH v7 1/6] seccomp: add a return code to trap to userspace, Kees Cook
          • Re: [PATCH v7 1/6] seccomp: add a return code to trap to userspace, Tycho Andersen
          • Re: [PATCH v7 1/6] seccomp: add a return code to trap to userspace, Tycho Andersen
            • Re: [PATCH v7 1/6] seccomp: add a return code to trap to userspace, Christian Brauner
    • Re: [PATCH v7 1/6] seccomp: add a return code to trap to userspace, Jann Horn via Containers
      • Re: [PATCH v7 1/6] seccomp: add a return code to trap to userspace, Kees Cook
        • Re: [PATCH v7 1/6] seccomp: add a return code to trap to userspace, Tycho Andersen
      • Re: [PATCH v7 1/6] seccomp: add a return code to trap to userspace, Tycho Andersen
        • Re: [PATCH v7 1/6] seccomp: add a return code to trap to userspace, Jann Horn via Containers
    • Re: [PATCH v7 1/6] seccomp: add a return code to trap to userspace, Aleksa Sarai
  • [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Tycho Andersen
    • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Jann Horn via Containers
      • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Tycho Andersen
    • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Jann Horn via Containers
      • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Tycho Andersen
    • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Kees Cook
    • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Christian Brauner
      • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Jann Horn via Containers
        • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Christian Brauner
          • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Jann Horn via Containers
            • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Christian Brauner
              • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Jann Horn via Containers
                • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Christian Brauner
                  • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Jann Horn via Containers
                    • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Christian Brauner
                      • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Jann Horn via Containers
                        • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Christian Brauner
                          • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Jann Horn via Containers
                            • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Christian Brauner
                              • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Jann Horn via Containers
                                • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Christian Brauner
                                  • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Christian Brauner
                                  • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Jann Horn via Containers
                                    • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Christian Brauner
                    • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Paul Moore
                      • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Jann Horn via Containers
                        • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Christian Brauner
                          • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Tycho Andersen
                            • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Christian Brauner
                              • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Tycho Andersen
                                • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Christian Brauner
                        • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Paul Moore
                          • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Jann Horn via Containers
                            • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Paul Moore
                              • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Andy Lutomirski
                                • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Tycho Andersen
                                  • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Jann Horn via Containers
                                  • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Christian Brauner
      • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Tycho Andersen
        • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Christian Brauner
        • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Andy Lutomirski
          • Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace, Christian Brauner
  • [PATCH v7 5/6] seccomp: add a way to pass FDs via a notification fd, Tycho Andersen
    • Re: [PATCH v7 5/6] seccomp: add a way to pass FDs via a notification fd, Jann Horn via Containers
      • Re: [PATCH v7 5/6] seccomp: add a way to pass FDs via a notification fd, Tycho Andersen
    • Re: [PATCH v7 5/6] seccomp: add a way to pass FDs via a notification fd, Jann Horn via Containers
      • Re: [PATCH v7 5/6] seccomp: add a way to pass FDs via a notification fd, Tycho Andersen
        • Re: [PATCH v7 5/6] seccomp: add a way to pass FDs via a notification fd, Jann Horn via Containers
          • Re: [PATCH v7 5/6] seccomp: add a way to pass FDs via a notification fd, Tycho Andersen
    • Re: [PATCH v7 5/6] seccomp: add a way to pass FDs via a notification fd, Kees Cook
      • Re: [PATCH v7 5/6] seccomp: add a way to pass FDs via a notification fd, Tycho Andersen
  • [PATCH v7 4/6] files: add a replace_fd_files() function, Tycho Andersen
    • Re: [PATCH v7 4/6] files: add a replace_fd_files() function, Jann Horn via Containers
      • Re: [PATCH v7 4/6] files: add a replace_fd_files() function, Tycho Andersen
    • Re: [PATCH v7 4/6] files: add a replace_fd_files() function, Kees Cook
      • Re: [PATCH v7 4/6] files: add a replace_fd_files() function, Kees Cook
        • Re: [PATCH v7 4/6] files: add a replace_fd_files() function, Jann Horn via Containers
        • Re: [PATCH v7 4/6] files: add a replace_fd_files() function, Tycho Andersen
  • [PATCH v7 6/6] samples: add an example of seccomp user trap, Tycho Andersen
    • Re: [PATCH v7 6/6] samples: add an example of seccomp user trap, Kees Cook
  • Re: [PATCH v7 0/6] seccomp trap to userspace, Michael Kerrisk (man-opages)
    • Re: [PATCH v7 0/6] seccomp trap to userspace, Tycho Andersen
      • Re: [PATCH v7 0/6] seccomp trap to userspace, Michael Kerrisk (man-pages)
        • Re: [PATCH v7 0/6] seccomp trap to userspace, Kees Cook
          • Re: [PATCH v7 0/6] seccomp trap to userspace, Michael Kerrisk (man-pages)
            • Re: [PATCH v7 0/6] seccomp trap to userspace, Jann Horn via Containers
• [RFC 00/20] ns: Introduce Time Namespace, Dmitry Safonov via Containers
  • [RFC 02/20] timens: Add timens_offsets, Dmitry Safonov via Containers
    • Re: [RFC 02/20] timens: Add timens_offsets, Cyrill Gorcunov
  • [RFC 01/20] ns: Introduce Time Namespace, Dmitry Safonov via Containers
    • Re: [RFC 01/20] ns: Introduce Time Namespace, Laurent Vivier
  • [RFC 03/20] timens: Introduce CLOCK_MONOTONIC offsets, Dmitry Safonov via Containers
  • [RFC 04/20] timens: Introduce CLOCK_BOOTTIME offset, Dmitry Safonov via Containers
  • [RFC 05/20] timerfd/timens: Take into account ns clock offsets, Dmitry Safonov via Containers
  • [RFC 06/20] kernel: Take into account timens clock offsets in clock_nanosleep, Dmitry Safonov via Containers
  • [RFC 07/20] timens: Shift /proc/uptime, Dmitry Safonov via Containers
  • [RFC 08/20] x86/vdso: Restrict splitting vvar vma, Dmitry Safonov via Containers
  • [RFC 09/20] x86/vdso/timens: Add offsets page in vvar, Dmitry Safonov via Containers
  • [RFC 10/20] x86/vdso: Use set_normalized_timespec() to avoid 32 bit overflow, Dmitry Safonov via Containers
  • [RFC 11/20] x86/vdso: Purge timens page on setns()/unshare()/clone(), Dmitry Safonov via Containers
  • [RFC 12/20] x86/vdso: Look for vvar vma to purge timens page, Dmitry Safonov via Containers
  • [RFC 13/20] posix-timers/timens: Take into account clock offsets, Dmitry Safonov via Containers
  • [RFC 14/20] timens: Add align for timens_offsets, Dmitry Safonov via Containers
  • [RFC 15/20] timens: Optimize zero-offsets, Dmitry Safonov via Containers
  • [RFC 16/20] selftest: Add Time Namespace test for supported clocks, Dmitry Safonov via Containers
    • Re: [RFC 16/20] selftest: Add Time Namespace test for supported clocks, Shuah Khan
  • [RFC 17/20] selftest/timens: Add test for timerfd, Dmitry Safonov via Containers
  • [RFC 18/20] selftest/timens: Add test for clock_nanosleep, Dmitry Safonov via Containers
  • [RFC 19/20] timens/selftest: Add procfs selftest, Dmitry Safonov via Containers
  • [RFC 20/20] timens/selftest: Add timer offsets test, Dmitry Safonov via Containers
  • Message not available
    • Re: [RFC 00/20] ns: Introduce Time Namespace, Andrey Vagin
      • Re: [RFC 00/20] ns: Introduce Time Namespace, Eric W. Biederman
        • Re: [RFC 00/20] ns: Introduce Time Namespace, Andrey Vagin
          • Re: [RFC 00/20] ns: Introduce Time Namespace, Eric W. Biederman
            • Re: [RFC 00/20] ns: Introduce Time Namespace, Dmitry Safonov
            • Re: [RFC 00/20] ns: Introduce Time Namespace, Thomas Gleixner
              • Re: [RFC 00/20] ns: Introduce Time Namespace, Thomas Gleixner
                • Re: [RFC 00/20] ns: Introduce Time Namespace, Andrey Vagin
                  • Re: [RFC 00/20] ns: Introduce Time Namespace, Thomas Gleixner
                    • Re: [RFC 00/20] ns: Introduce Time Namespace, Dmitry Safonov
                      • Re: [RFC 00/20] ns: Introduce Time Namespace, Thomas Gleixner
              • Re: [RFC 00/20] ns: Introduce Time Namespace, Eric W. Biederman
                • Re: [RFC 00/20] ns: Introduce Time Namespace, Thomas Gleixner
                  • Message not available
                    • Re: Setting monotonic time?, Andrey Vagin
                      • Re: Setting monotonic time?, Thomas Gleixner
                  • Message not available
                    • Re: Setting monotonic time?, Thomas Gleixner
                      • Re: Setting monotonic time?, Arnd Bergmann
                        • Re: Setting monotonic time?, Thomas Gleixner
                          • Re: Setting monotonic time?, Eric W. Biederman
                            • Re: Setting monotonic time?, Thomas Gleixner
                              • Re: Setting monotonic time?, Eric W. Biederman
                                • Re: Setting monotonic time?, Arnd Bergmann
                              • Re: Setting monotonic time?, Thomas Gleixner