| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Wed, 25 Nov 2015 19:55:53 +0000 From: Serge Hallyn <serge.hallyn@...ntu.com> To: Tejun Heo <tj@...nel.org> Cc: linux-api@...r.kernel.org, containers@...ts.linux-foundation.org, linux-kernel@...r.kernel.org, ebiederm@...ssion.com, lxc-devel@...ts.linuxcontainers.org, cgroups@...r.kernel.org, akpm@...ux-foundation.org Subject: Re: [PATCH 7/8] cgroup: mount cgroupns-root when inside non-init cgroupns Quoting Tejun Heo (tj@...nel.org): > Hello, Serge. > > On Wed, Nov 25, 2015 at 12:01:56AM -0600, Serge E. Hallyn wrote: > > that was my goal with https://git.kernel.org/cgit/linux/kernel/git/sergeh/linux-security.git/commit/?h=cgroupns.v4&id=8eb75d2bb24df59e262f050dce567d2332adc5f3 > > (which was sent inline earlier in this thread in response to Eric) Does > > that look sufficient? > > Hmmm... but that wouldn't work with non-root and user ns. I think Are you sure? IIUC that code block is only hit when we didn't find an already-mounted subsystem. > what's necessary is ensuring that namespace scoped mount never creates > a new hierarchy but always reuses an existing one. > > Thanks. > > -- > tejun > _______________________________________________ > Containers mailing list > Containers@...ts.linux-foundation.org > https://lists.linuxfoundation.org/mailman/listinfo/containers -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists