lkml.org 
[lkml]   [2012]   [May]   [27]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    SubjectRe: [GIT PULL] user namespace enhancements for Linux 3.5-rc1
    From
    On Tue, May 22, 2012 at 8:48 PM, Eric W. Biederman
    <ebiederm@xmission.com> wrote:
    > - Capabilities are localized to the current user namespace making it
    >  safe to give the initial user in a user namespace all capabilities.

    Today I've tried your patch set, but it looks like a root-user in a
    Linux container is still able to use /proc/sysrq-trigger.
    Am I misunderstanding user namespaces or is there still something missing?

    --
    Thanks,
    //richard
    --
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2012-05-27 21:41    [W:0.022 / U:0.216 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site