]> git.apps.os.sepia.ceph.com Git - ceph-client.git/commit
projects / ceph-client.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a937536) | patch
scm: Require CAP_SYS_ADMIN over the current pidns to spoof pids.
authorEric W. Biederman <ebiederm@xmission.com>
Fri, 15 Mar 2013 08:03:33 +0000 (01:03 -0700)
committerEric W. Biederman <ebiederm@xmission.com>
Mon, 18 Mar 2013 00:16:16 +0000 (17:16 -0700)
commit92f28d973cce45ef5823209aab3138eb45d8b349
tree069609531cff66b163ac17f29a8a1ce957d020eftree | snapshot
parenta937536b868b8369b98967929045f1df54234323commit | diff
scm: Require CAP_SYS_ADMIN over the current pidns to spoof pids.

Don't allow spoofing pids over unix domain sockets in the corner
cases where a user has created a user namespace but has not yet
created a pid namespace.

Cc: stable@vger.kernel.org
Reported-by: Andy Lutomirski <luto@amacapital.net>
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
net/core/scm.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.