Re: [RCF] [PATCH] unprivileged mount/umount

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> > You could argue about the usefulness of ptrace.  The point is, that
> > suid/sgid programs _can_ be discerned, and ptrace _needs_ to discern
> > them.
> 
> I actually neither needs to, nor does. For ptrace the definition is:
>     If the tracee has different privilegies, than the tracer, than it
>     can't be traced.

Right.  I was talking about suid/sgid because with private namespaces
(unless there's a way to enter them externally) only suid/sgid
programs will have different privileges.

> For this definition, the check is not a hack. It's the only way to go.
> 
> Now this definition is really what is needed for the filesystem case
> too, so I think it's not a hack either. 

Fully agreed.

Miklos
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

[Index of Archives]     [Kernel Newbies]     [Netfilter]     [Bugtraq]     [Photo]     [Stuff]     [Gimp]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Video 4 Linux]     [Linux for the blind]     [Linux Resources]
  Powered by Linux