Re: [PATCH v5 3/6] pid_namespace: use checkpoint_restore_ns_capable() for ns_last_pid

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: Adrian Reber <areber@xxxxxxxxxx>
Subject: Re: [PATCH v5 3/6] pid_namespace: use checkpoint_restore_ns_capable() for ns_last_pid
From: Christian Brauner <christian.brauner@xxxxxxxxxx>
Date: Wed, 15 Jul 2020 17:08:38 +0200
Cc: Eric Biederman <ebiederm@xxxxxxxxxxxx>, Pavel Emelyanov <ovzxemul@xxxxxxxxx>, Oleg Nesterov <oleg@xxxxxxxxxx>, Dmitry Safonov <0x7f454c46@xxxxxxxxx>, Andrei Vagin <avagin@xxxxxxxxx>, Nicolas Viennot <Nicolas.Viennot@xxxxxxxxxxxx>, Michał Cłapiński <mclapinski@xxxxxxxxxx>, Kamil Yurtsever <kyurtsever@xxxxxxxxxx>, Dirk Petersen <dipeit@xxxxxxxxx>, Christine Flood <chf@xxxxxxxxxx>, Casey Schaufler <casey@xxxxxxxxxxxxxxxx>, Mike Rapoport <rppt@xxxxxxxxxxxxx>, Radostin Stoyanov <rstoyanov1@xxxxxxxxx>, Cyrill Gorcunov <gorcunov@xxxxxxxxxx>, Serge Hallyn <serge@xxxxxxxxxx>, Stephen Smalley <stephen.smalley.work@xxxxxxxxx>, Sargun Dhillon <sargun@xxxxxxxxx>, Arnd Bergmann <arnd@xxxxxxxx>, linux-security-module@xxxxxxxxxxxxxxx, linux-kernel@xxxxxxxxxxxxxxx, selinux@xxxxxxxxxxxxxxx, Eric Paris <eparis@xxxxxxxxxxxxxx>, Jann Horn <jannh@xxxxxxxxxx>, linux-fsdevel@xxxxxxxxxxxxxxx
In-reply-to: <20200715144954.1387760-4-areber@redhat.com>

On Wed, Jul 15, 2020 at 04:49:51PM +0200, Adrian Reber wrote:
> Use the newly introduced capability CAP_CHECKPOINT_RESTORE to allow
> writing to ns_last_pid.
> 
> Signed-off-by: Adrian Reber <areber@xxxxxxxxxx>
> Signed-off-by: Nicolas Viennot <Nicolas.Viennot@xxxxxxxxxxxx>
> ---

Acked-by: Christian Brauner <christian.brauner@xxxxxxxxxx>

References:
- [PATCH v5 0/6] capabilities: Introduce CAP_CHECKPOINT_RESTORE
  - From: Adrian Reber
- [PATCH v5 3/6] pid_namespace: use checkpoint_restore_ns_capable() for ns_last_pid
  - From: Adrian Reber

Prev by Date: Re: [PATCH v5 2/6] pid: use checkpoint_restore_ns_capable() for set_tid
Next by Date: Re: [PATCH 7/7] exec: Implement kernel_execve
Previous by thread: [PATCH v5 3/6] pid_namespace: use checkpoint_restore_ns_capable() for ns_last_pid
Next by thread: [PATCH v5 5/6] prctl: Allow checkpoint/restore capable processes to change exe link
Index(es):
- Date
- Thread

[Index of Archives] [Linux Ext4 Filesystem] [Union Filesystem] [Filesystem Testing] [Ceph Users] [Ecryptfs] [AutoFS] [Kernel Newbies] [Share Photos] [Security] [Netfilter] [Bugtraq] [Yosemite News] [MIPS Linux] [ARM Linux] [Linux Security] [Linux Cachefs] [Reiser Filesystem] [Linux RAID] [Samba] [Device Mapper] [CEPH Development]