linux-kernel - Re: [PATCH v2 0/2] pid_namespace: namespacify sysctl kernel.pid

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <z54lsfeqvqvkqkgrlo72s7ftf7ltx55tg36ytcgwhtgtxlgckp@rytzoykb6csb>
Date: Wed, 5 Mar 2025 16:01:25 +0100
From: Michal Koutný <mkoutny@...e.com>
To: Aleksandr Mikhalitsyn <aleksandr.mikhalitsyn@...onical.com>
Cc: brauner@...nel.org, stgraber@...raber.org, tycho@...ho.pizza, 
	cyphar@...har.com, yun.zhou@...driver.com, joel.granados@...nel.org, 
	rostedt@...dmis.org, linux-kernel@...r.kernel.org
Subject: Re: [PATCH v2 0/2] pid_namespace: namespacify sysctl kernel.pid_max

On Fri, Feb 28, 2025 at 02:46:11PM +0100, Michal Koutný <mkoutny@...e.com> wrote:
> One more idea I have, would be to rebase my original pid_max default
> value elimination [1] on top of the namespaced pid_max and not to copy
> from parent but start unlimited in the ns too. (Or keep global default
> value and unlimit only descednants so that's similar semantics to
> ucounts.)

This seems like a satisfactory conservative correction
https://lore.kernel.org/r/20250305145849.55491-1-mkoutny@suse.com

Michal

Download attachment "signature.asc" of type "application/pgp-signature" (229 bytes)