lkml.org 
[lkml]   [2006]   [Jul]   [14]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    SubjectRe: [PATCH -mm 5/7] add user namespace
    Date
    "Serge E. Hallyn" <serue@us.ibm.com> writes:

    > Quoting Eric W. Biederman (ebiederm@xmission.com):
    >> If you permission checks are not (user namespace, uid) what can't you do?
    >
    > File descripters can only be passed over a unix socket, right?

    No. You can use /proc to do the same thing. You can inherit
    file descriptors, etc. This isn't a door you can just close and ignore.
    It is too easy to do this to assume you have closed every possible
    way to get a descriptor from outside of ``container''.

    Suppose you have user fred uid 1000 outside of any containers,
    and you have user joe uid 1000 inside user uid namespace. If you don't
    make your permission checks (user namespace, uid) fred can do terrible
    things to joe.

    If I we don't do the expanded permission checks the only alternative
    is to check to see if every object is in our ``container'' at every
    access. That isn't something I want to do.

    I don't intend to partition objects just partition object look ups by name.
    Which means that if you very carefully setup your initial process you
    will never be able to find an object outside of your namespace. But
    the kernel never should assume user space has done that.

    > So this seems to fall into the same "userspace should set things up
    > sanely" argument you've brought up before.

    For using it yes. But not for correct kernel operation.

    > Don't get me wrong though - the idea of using in-kernel keys as
    > cross-namespace uid's is definately interesting.

    That is their role in the kernel. A flavor of key to handle uid
    mapping needs to be added, but that is all.

    Eric
    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2006-07-14 16:55    [W:5.340 / U:0.200 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site