diff options
| author |   Andy Lutomirski <luto@amacapital.net> | 2013-04-14 11:44:04 -0700 |
|---|---|---|
| committer | Andy Lutomirski <luto@amacapital.net> | 2013-04-14 18:11:32 -0700 |
| commit | 41c21e351e79004dbb4efa4bc14a53a7e0af38c5 (patch) | |
| tree | 09f41257304634a6f2dcf48fd99504924a5344f1 /tools/perf/scripts/python/export-to-postgresql.py | |
| parent | userns: Check uid_map's opener's fsuid, not the current fsuid (diff) | |
| download | linux-dev-41c21e351e79004dbb4efa4bc14a53a7e0af38c5.tar.xz linux-dev-41c21e351e79004dbb4efa4bc14a53a7e0af38c5.zip | |
userns: Changing any namespace id mappings should require privileges
Changing uid/gid/projid mappings doesn't change your id within the
namespace; it reconfigures the namespace. Unprivileged programs should
*not* be able to write these files. (We're also checking the privileges
on the wrong task.)
Given the write-once nature of these files and the other security
checks, this is likely impossible to usefully exploit.
Signed-off-by: Andy Lutomirski <luto@amacapital.net>
Diffstat (limited to 'tools/perf/scripts/python/export-to-postgresql.py')
0 files changed, 0 insertions, 0 deletions