Messages in this thread | | | Date | Thu, 03 Apr 2008 21:31:57 +0200 | From | Manfred Spraul <> | Subject | Re: [RFC, PATCH] fix SEM_UNDO with namespaces |
| |
Andrew Morton wrote: >> >> Absolutely. >> >> > > Guys, what's the status here? > > afaict Manfred has identified an available-to-unprivileged-apps kernel > memory corrupter? If so, we should fix it asap for 2.6.25. And for > 2.6.24.x if it's also present there. > > No, it's a priveledged-only memory corruption: > int unshare_nsproxy_namespaces(unsigned long unshare_flags, > struct nsproxy **new_nsp, struct fs_struct *new_fs) > { > int err = 0; > [snip] > if (!capable(CAP_SYS_ADMIN)) > return -EPERM;
> Manfred's patch doesn't come close to applying against the 2.6.26 IPC > things which we have queued but that's OK - bugfixes come first. > Where can I find the queued changes? Are they in -mm?
-- Manfred
| |