> The pipe process needs to run in the namespaces of the process who set > the core pattern, not in the namespaces of the dumping process. > Otherwise it is possible to trigger a privileged process to run in a > context where it's reality that it expected, causing it to misuse > it's privileges. Even if we don't have a privilege problem I think > we will have a case of mismatched functionality where the core pattern > will not work as expected. For me it seems rather the other way around: running the helper in some highly priviledged namespace is more dangerous. If it runs in the same context as the crasher it can do the least amount of damage relative to the crash process. And as Will pointed out it's the only sane way to deal with net namespaces. -Andi -- ak@xxxxxxxxxxxxxxx -- Speaking for myself only. -- To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
