 Andy Lutomirski
|
58319057b7
capabilities: ambient capabilities
|
%!s(int64=10) %!d(string=hai) anos |
 Eric W. Biederman
|
faf00da544
userns,pidns: Force thread group sharing, not signal handler sharing.
|
%!s(int64=10) %!d(string=hai) anos |
 Linus Torvalds
|
87c31b39ab
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace
|
%!s(int64=10) %!d(string=hai) anos |
|
Eric W. Biederman
|
36476beac4
userns; Correct the comment in map_write
|
%!s(int64=10) %!d(string=hai) anos |
|
Eric W. Biederman
|
66d2f338ee
userns: Allow setting gid_maps without privilege when setgroups is disabled
|
%!s(int64=10) %!d(string=hai) anos |
|
Eric W. Biederman
|
9cc46516dd
userns: Add a knob to disable setgroups on a per user namespace basis
|
%!s(int64=10) %!d(string=hai) anos |
|
Eric W. Biederman
|
f0d62aec93
userns: Rename id_map_mutex to userns_state_mutex
|
%!s(int64=10) %!d(string=hai) anos |
|
Eric W. Biederman
|
f95d7918bd
userns: Only allow the creator of the userns unprivileged mappings
|
%!s(int64=10) %!d(string=hai) anos |
|
Eric W. Biederman
|
80dd00a237
userns: Check euid no fsuid when establishing an unprivileged uid mapping
|
%!s(int64=10) %!d(string=hai) anos |
|
Eric W. Biederman
|
be7c6dba23
userns: Don't allow unprivileged creation of gid mappings
|
%!s(int64=10) %!d(string=hai) anos |
|
Eric W. Biederman
|
273d2c67c3
userns: Don't allow setgroups until a gid mapping has been setablished
|
%!s(int64=10) %!d(string=hai) anos |
|
Eric W. Biederman
|
0542f17bf2
userns: Document what the invariant required for safe unprivileged mappings.
|
%!s(int64=10) %!d(string=hai) anos |
 Al Viro
|
33c429405a
copy address of proc_ns_ops into ns_common
|
%!s(int64=10) %!d(string=hai) anos |
|
Al Viro
|
6344c433a4
new helpers: ns_alloc_inum/ns_free_inum
|
%!s(int64=10) %!d(string=hai) anos |
|
Al Viro
|
64964528b2
make proc_ns_operations work with struct ns_common * instead of void *
|
%!s(int64=10) %!d(string=hai) anos |
|
Al Viro
|
3c04118461
switch the rest of proc_ns_operations to working with &...->ns
|
%!s(int64=10) %!d(string=hai) anos |
|
Al Viro
|
435d5f4bb2
common object embedded into various struct ....ns
|
%!s(int64=10) %!d(string=hai) anos |
 Fabian Frederick
|
ccf94f1b4a
proc: constify seq_operations
|
%!s(int64=11) %!d(string=hai) anos |
|
Fabian Frederick
|
68a9a435e4
kernel/user_namespace.c: kernel-doc/checkpatch fixes
|
%!s(int64=11) %!d(string=hai) anos |
 Mikulas Patocka
|
e79323bd87
user namespace: fix incorrect memory barriers
|
%!s(int64=11) %!d(string=hai) anos |
 Paul Gortmaker
|
c96d6660dc
kernel: audit/fix non-modular users of module_init in core code
|
%!s(int64=11) %!d(string=hai) anos |
 Brian Campbell
|
b080e047a6
user_namespace.c: Remove duplicated word in comment
|
%!s(int64=11) %!d(string=hai) anos |
 David Howells
|
f36f8c75ae
KEYS: Add per-user_namespace registers for persistent per-UID kerberos caches
|
%!s(int64=12) %!d(string=hai) anos |
|
Linus Torvalds
|
c7c4591db6
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace
|
%!s(int64=12) %!d(string=hai) anos |
|
Eric W. Biederman
|
e51db73532
userns: Better restrictions on when proc and sysfs can be mounted
|
%!s(int64=12) %!d(string=hai) anos |
 Oleg Nesterov
|
8742f229b6
userns: limit the maximum depth of user_namespace->parent chain
|
%!s(int64=12) %!d(string=hai) anos |
|
Oleg Nesterov
|
6160968cee
userns: unshare_userns(&cred) should not populate cred on failure
|
%!s(int64=12) %!d(string=hai) anos |
|
Linus Torvalds
|
20b4fb4852
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
|
%!s(int64=12) %!d(string=hai) anos |
|
David Howells
|
0bb80f2405
proc: Split the namespace stuff out into linux/proc_ns.h
|
%!s(int64=12) %!d(string=hai) anos |
 Andy Lutomirski
|
41c21e351e
userns: Changing any namespace id mappings should require privileges
|
%!s(int64=12) %!d(string=hai) anos |
