Re: [PATCH] [RFC][WIP] namespace.c: Allow some unprivileged proc mounts when not fully visible

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: "Serge E. Hallyn" <serge@xxxxxxxxxx>
Subject: Re: [PATCH] [RFC][WIP] namespace.c: Allow some unprivileged proc mounts when not fully visible
From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
Date: Wed, 04 Apr 2018 17:02:27 -0500
Cc: Alban Crequy <alban.crequy@xxxxxxxxx>, Iago Lopez Galeiras <iago@xxxxxxxxxx>, containers@xxxxxxxxxxxxxxxxxxxxxxxxxx, Daniel J Walsh <dwalsh@xxxxxxxxxx>, Akihiro Suda <suda.akihiro@xxxxxxxxxxxxx>, linux-kernel@xxxxxxxxxxxxxxx, Michael Crosby <crosbymichael@xxxxxxxxx>, Stephen J Day <stephen.day@xxxxxxxxxx>, Alban Crequy <alban@xxxxxxxxxx>, Alexander Viro <viro@xxxxxxxxxxxxxxxxxx>, linux-fsdevel@xxxxxxxxxxxxxxx, Jess Frazelle <acidburn@xxxxxxxxxxxxx>
In-reply-to: <20180404184250.GA9997@mail.hallyn.com> (Serge E. Hallyn's message of "Wed, 4 Apr 2018 13:42:50 -0500")
User-agent: Gnus/5.13 (Gnus v5.13) Emacs/25.1 (gnu/linux)

"Serge E. Hallyn" <serge@xxxxxxxxxx> writes:

> Quoting Eric W. Biederman (ebiederm@xxxxxxxxxxxx):
>> It looks like a cruft free cousin of proc that is just processes would
>> be applicable to your usecase.
>
> Just to check - is that something you're working on?

Only to the point of reviewing code, and I don't have a version to
review right now.

Eric

References:
- [PATCH] [RFC][WIP] namespace.c: Allow some unprivileged proc mounts when not fully visible
  - From: Alban Crequy
- Re: [PATCH] [RFC][WIP] namespace.c: Allow some unprivileged proc mounts when not fully visible
  - From: Eric W. Biederman
- Re: [PATCH] [RFC][WIP] namespace.c: Allow some unprivileged proc mounts when not fully visible
  - From: Serge E. Hallyn

Prev by Date: Re: REGRESSION/TEST FAILURE caused by DEBUG_RWSEMS
Next by Date: [PATCH net-next 00/12] fscache: Fixes, traces and development
Previous by thread: Re: [PATCH] [RFC][WIP] namespace.c: Allow some unprivileged proc mounts when not fully visible
Next by thread: Re: [PATCH] [RFC][WIP] namespace.c: Allow some unprivileged proc mounts when not fully visible
Index(es):
- Date
- Thread

[Index of Archives] [Linux Ext4 Filesystem] [Union Filesystem] [Filesystem Testing] [Ceph Users] [Ecryptfs] [AutoFS] [Kernel Newbies] [Share Photos] [Security] [Netfilter] [Bugtraq] [Yosemite News] [MIPS Linux] [ARM Linux] [Linux Security] [Linux Cachefs] [Reiser Filesystem] [Linux RAID] [Samba] [Device Mapper] [CEPH Development]