On Thu, Aug 25, 2011 at 04:04:35PM +0200, Andi Kleen wrote: ... > > > > > > For example if I pass a file descriptor into a chroot process for > > > reading, and with this interface you can open it for writing too. > > > I could see this causing problems. > > > > How does it differ from the /proc/pid/fd links? > > Those cannot be opened I thought. > -Andi > We have ptrace_may_access in lookup so I don't think you'll be able to open it from another namespace or/and if you have not enough credentials to. Cyrill -- To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
