[lkml]   [2014]   [Apr]   [16]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: [PATCH 2/2] net: Implement SO_PASSCGROUP to enable passing cgroup path

On Wed, Apr 16, 2014 at 12:13:57PM -0400, Simo Sorce wrote:
> The only one that *may* be reasonable is the "secret" cgroup name one,
> however nobody seem to come up with a reason why it is legitimate to
> allow to keep cgroup names secret.

Ugh, please don't play security games with cgroup names. It is one of
the identifying properties of a task, like a pid, and will be used in
other parts of the kernel to match groups of tasks. If we play
security peekaboo with cgroup names, it has to be transitive and puts
burdens on all its future uses. Unless there are *REALLY* strong
rationales, which can also justify hiding pids, this isn't happening.



 \ /
  Last update: 2014-04-16 18:41    [W:0.145 / U:3.340 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site