Messages in this thread |  | | | Date | Mon, 8 Dec 2008 09:46:51 +1100 (EST) | | From | James Morris <> | | Subject | Re: [PATCH 1/2] user namespaces: let user_ns be cloned with fairsched |
| |
On Wed, 3 Dec 2008, Serge E. Hallyn wrote:
> (These two patches are in the next-unacked branch of > git://git.kernel.org/pub/scm/linux/kernel/git/sergeh/userns-2.6. > If they get some ACKs, then I hope to feed this into security-next. > After these two, I think we're ready to tackle userns+capabilities) > > Fairsched creates a per-uid directory under /sys/kernel/uids/. > So when you clone(CLONE_NEWUSER), it tries to create > /sys/kernel/uids/0, which already exists, and you get back > -ENOMEM. > > This was supposed to be fixed by sysfs tagging, but that > was postponed (ok, rejected until sysfs locking is fixed). > So, just as with network namespaces, we just don't create > those directories for user namespaces other than the init. > > Signed-off-by: Serge E. Hallyn <serue@us.ibm.com>
Applied to git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/security-testing-2.6#next
-- James Morris <jmorris@namei.org>
|  |