Messages in this thread | | | Date | Tue, 23 Apr 2024 12:58:25 +0200 | Subject | Re: [PATCH v2 0/2] implement OA2_INHERIT_CRED flag for openat2() | From | Stefan Metzmacher <> |
| |
Am 23.04.24 um 12:48 schrieb Stas Sergeev: > This patch-set implements the OA2_INHERIT_CRED flag for openat2() syscall. > It is needed to perform an open operation with the creds that were in > effect when the dir_fd was opened. This allows the process to pre-open > some dirs and switch eUID (and other UIDs/GIDs) to the less-privileged > user, while still retaining the possibility to open/create files within > the pre-opened directory set. > > Changes in v2: > - capture full struct cred instead of just fsuid/fsgid. > Suggested by Stefan Metzmacher <metze@samba.org> > > CC: Stefan Metzmacher <metze@samba.org> > CC: Eric Biederman <ebiederm@xmission.com> > CC: Alexander Viro <viro@zeniv.linux.org.uk> > CC: Andy Lutomirski <luto@kernel.org> > CC: Christian Brauner <brauner@kernel.org> > CC: Jan Kara <jack@suse.cz> > CC: Jeff Layton <jlayton@kernel.org> > CC: Chuck Lever <chuck.lever@oracle.com> > CC: Alexander Aring <alex.aring@gmail.com> > CC: linux-fsdevel@vger.kernel.org > CC: linux-kernel@vger.kernel.org
I guess this is something that should cc linux-api@vger.kernel.org ...
metze
| |