Re: [PATCH v5 3/6] pid_namespace: use checkpoint_restore_ns_capable() for ns_last_pid

From: Christian Brauner
Date: Wed Jul 15 2020 - 11:08:59 EST

Next message: Kees Cook: "Re: [PATCH 7/7] exec: Implement kernel_execve"
Previous message: Kai-Heng Feng: "Re: [Regression] "SUNRPC: Add "@len" parameter to gss_unwrap()" breaks NFS Kerberos on upstream stable 5.4.y"
In reply to: Adrian Reber: "[PATCH v5 3/6] pid_namespace: use checkpoint_restore_ns_capable() for ns_last_pid"
Next in thread: Adrian Reber: "[PATCH v5 4/6] proc: allow access in init userns for map_files with CAP_CHECKPOINT_RESTORE"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Wed, Jul 15, 2020 at 04:49:51PM +0200, Adrian Reber wrote:
> Use the newly introduced capability CAP_CHECKPOINT_RESTORE to allow
> writing to ns_last_pid.
>
> Signed-off-by: Adrian Reber <areber@xxxxxxxxxx>
> Signed-off-by: Nicolas Viennot <Nicolas.Viennot@xxxxxxxxxxxx>
> ---

Acked-by: Christian Brauner <christian.brauner@xxxxxxxxxx>

Next message: Kees Cook: "Re: [PATCH 7/7] exec: Implement kernel_execve"
Previous message: Kai-Heng Feng: "Re: [Regression] "SUNRPC: Add "@len" parameter to gss_unwrap()" breaks NFS Kerberos on upstream stable 5.4.y"
In reply to: Adrian Reber: "[PATCH v5 3/6] pid_namespace: use checkpoint_restore_ns_capable() for ns_last_pid"
Next in thread: Adrian Reber: "[PATCH v5 4/6] proc: allow access in init userns for map_files with CAP_CHECKPOINT_RESTORE"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]