The patch titled userns: don't leak root user has been added to the -mm tree. Its filename is userns-dont-leak-root-user.patch *** Remember to use Documentation/SubmitChecklist when testing your code *** See http://www.zip.com.au/~akpm/linux/patches/stuff/added-to-mm.txt to find out what to do about this ------------------------------------------------------ Subject: userns: don't leak root user From: Alexey Dobriyan <adobriyan@xxxxx> Signed-off-by: Alexey Dobriyan <adobriyan@xxxxx> Acked-by: Cedric Le Goater <clg@xxxxxxxxxx> Acked-by: Serge Hallyn <serue@xxxxxxxxxx> Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx> --- kernel/user_namespace.c | 1 + 1 files changed, 1 insertion(+) diff -puN kernel/user_namespace.c~userns-dont-leak-root-user kernel/user_namespace.c --- a/kernel/user_namespace.c~userns-dont-leak-root-user +++ a/kernel/user_namespace.c @@ -81,6 +81,7 @@ void free_user_ns(struct kref *kref) struct user_namespace *ns; ns = container_of(kref, struct user_namespace, kref); + free_uid(ns->root_user); kfree(ns); } _ Patches currently in -mm which might be from adobriyan@xxxxx are fix-ver_linux-glibc-version-printing.patch userns-dont-leak-root-user.patch consolidate-ptrace_detach.patch use-list_head-in-binfmt-handling-update.patch make-unregister_binfmt-return-void.patch slab_panic-more-proc-posix-timers-shmem.patch add-kernel-notifierc.patch add-kernel-notifierc-fix.patch add-kernel-notifierc-fix-2.patch tweak-proc-ipmi-removal.patch shrink-task_struct-if-config_futex=n.patch lguest-should-depend-on-config_futex.patch sysctl-core-stop-using-the-unnecessary-ctl_table-typedef.patch sysctl-factor-out-sysctl_data.patch sysctl-error-on-bad-sysctl-tables.patch sysctl-update-sysctl_check_table.patch sysct-mqueue-remove-the-binary-sysctl-numbers.patch sysctl-remove-binary-sysctl-support-where-it-clearly-doesnt-work.patch sysctl-fix-neighbour-table-sysctls.patch sysctl-ipv6-route-flushing-kill-binary-path.patch sysctl-remove-broken-sunrpc-debug-binary-sysctls.patch sysctl-x86_64-remove-unnecessary-binary-paths.patch sysctl-remove-broken-cdrom-binary-sysctls.patch sysctl-ipv4-remove-binary-sysctl-paths-where-they-are-broken.patch sysctl-remove-the-binary-interface-for-aio-nr-aio-max-nr-acpi_video_flags.patch single_open-seq_release-leak-diagnostics.patch - To unsubscribe from this list: send the line "unsubscribe mm-commits" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html