netdev - Re: ip netns exec hides mount points from child processes

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <2b00e3ca-11ac-be47-ac7b-77c8fb24e3ff@autistici.org>
Date:   Wed, 18 Sep 2019 18:26:53 +0200
From:   Naja Melan <najamelan@...istici.org>
To:     netdev@...r.kernel.org
Cc:     "Eric W. Biederman" <ebiederm@...ssion.com>
Subject: Re: ip netns exec hides mount points from child processes

Thank you for looking into it. Sorry for the long delay, but my answers got blocked by xmission several times and I think I just gave up on containers at some point. This is still not solved though. To answer Eric's question: 

> Why you don't see the new sysfs is something I need more information to understand.

> Since everything else is mounted on top of sysfs. The code probably needs an update to bind mount (cgroups, debugfs, configs, pstore, selinuxfs, and securitfs) from the old sysfs to the new sysfs.  That everything now gets mount points on sysfs is new from the time the code was written and the code just needs an update for that.

There is a mount of type sysfs. It is now called after the network namespace rather than being called sysfs, that's why I missed it last time. It looks like:
testns on /sys type sysfs (rw,relatime)

So that's probably not a problem.

So it seems the code of `ip netns exec` still hasn't been updated not to lose cgroups and all other system mounts...

I just checked with 5.2.14-arch2-1-ARCH

Thanks in advance,
Naja Melan