Messages in this thread | | | From | (Eric W. Biederman) | Date | Thu, 17 Jun 2010 16:11:27 -0700 | Subject | Re: [PATCH] ptrace: allow restriction of ptrace scope |
| |
"Serge E. Hallyn" <serge@hallyn.com> writes:
> Quoting Eric W. Biederman (ebiederm@xmission.com): >> Kees Cook <kees.cook@canonical.com> writes: >> Somewhere Serge has a git tree where he started making the capabilities > > FWIW I believe the latest one is > > http://git.kernel.org/?p=linux/kernel/git/sergeh/linux-cr.git;a=shortlog;h=refs/heads/userns.feb16.1
Cool.
> I (/we) should get back to that... Though waiting for certain other > bits to settle (i.e. tagged sysfs and user-ns-safe SCM_CREDENTIALS) > isn't a bad thing.
Tagged sysfs is in 2.6.35-rc1+ user-ns-safe SCM_CREDENTIALS have merged to net-next.
ns_capable seems to be the next piece easy piece of the user_namespace.
Eric
| |