lkml.org 
[lkml]   [2009]   [Jul]   [6]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
SubjectSCM_CREDENTIALS and PID namespaces
From
Currently, the SCM_CREDENTIALS control message contains the PID of the
sending process, in the sender's PID namespace. This would seem to
violate the spirit of SCM_CREDENTIALS since, from the receiver's point
of view, the sender's PID in that namespace might be another process
entirely.

I started to write a patch for this, but then got hung up on the
semantics, so I'm asking here first.

Here's what I think should happen:

A received SCM_CREDENTIALS should contain the PID of the sending
process, in the receiver's namespace. Or -1 if the PID is not
representable.

If the sending process has exited, the pid should be -1. (We don't
want to hold a reference to a struct pid from the SKB, so we have to
do this).

When sending an SCM_CREDENTIALS message, if pid == getpid(), then the
PID acts as above. Otherwise, we pass the PID raw to the receiver. (A
process has to be CAP_SYS_ADMIN to fake its PID).


Seem reasonable?


AGL

--
Adam Langley agl@imperialviolet.org http://www.imperialviolet.org


\
 
 \ /
  Last update: 2009-07-07 01:17    [W:0.164 / U:0.124 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site