lkml.org 
[lkml]   [2008]   [Apr]   [3]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [RFC, PATCH] fix SEM_UNDO with namespaces
Andrew Morton wrote:
>>
>> Absolutely.
>>
>>
>
> Guys, what's the status here?
>
> afaict Manfred has identified an available-to-unprivileged-apps kernel
> memory corrupter? If so, we should fix it asap for 2.6.25. And for
> 2.6.24.x if it's also present there.
>
>
No, it's a priveledged-only memory corruption:
> int unshare_nsproxy_namespaces(unsigned long unshare_flags,
> struct nsproxy **new_nsp, struct fs_struct *new_fs)
> {
> int err = 0;
> [snip]
> if (!capable(CAP_SYS_ADMIN))
> return -EPERM;

> Manfred's patch doesn't come close to applying against the 2.6.26 IPC
> things which we have queued but that's OK - bugfixes come first.
>
Where can I find the queued changes? Are they in -mm?

--
Manfred


\
 
 \ /
  Last update: 2008-04-03 21:35    [W:2.148 / U:0.008 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site