Re: [PATCH 0/2] sysctl: allow CLONE_NEWUSER to be disabled
From: Eric W. Biederman
Date: Mon Jan 25 2016 - 14:51:37 EST
Kees Cook <keescook@xxxxxxxxxxxx> writes:
> Well, I don't know about less weird, but it would leave a unneeded
> hole in the permission checks.
To be clear the current patch has my:
Nacked-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
The code is buggy, and poorly thought through. Your lack of interest in
fixing the bugs in your patch is distressing.
So broken code, not willing to fix. No. We are not merging this sysctl.