login
Login
/
Register
Search
Search this site:
Forums
News
Blogs
Features
Site
Home
»
Mailing list archives
»
linux-kernel
»
2010
»
December
»
17
Re: [RFC 4/5] user namespaces: allow killing tasks in your own or child userns
view
thread
Previous message: [
thread
] [
date
] [
author
]
Next message: [
thread
] [
date
] [
author
]
[view in full thread]
From: Eric W. Biederman
Subject:
Re: [RFC 4/5] user namespaces: allow killing tasks in your own or child userns
Date: Friday, December 17, 2010 - 12:31 pm
"Serge E. Hallyn" <serge@hallyn.com> writes:
quoted text
> Changelog: > Dec 8: Fixed bug in my check_kill_permission pointed out by > Eric Biederman. > Dec 13: Apply Eric's suggestion to pass target task into kill_ok_by_cred() > for clarity > > Signed-off-by: Serge E. Hallyn <serge.hallyn@canonical.com> > --- > kernel/signal.c | 33 ++++++++++++++++++++++++++++----- > 1 files changed, 28 insertions(+), 5 deletions(-) > > diff --git a/kernel/signal.c b/kernel/signal.c > index 4e3cff1..499bd36 100644 > --- a/kernel/signal.c > +++ b/kernel/signal.c > @@ -659,11 +686,7 @@ static int check_kill_permission(int sig, struct siginfo *info, > cred = current_cred(); > tcred = __task_cred(t);
Nit pick you don't need to compute cred and tcred here now.
quoted text
> if (!same_thread_group(current, t) && > - (cred->euid ^ tcred->suid) && > - (cred->euid ^ tcred->uid) && > - (cred->uid ^ tcred->suid) && > - (cred->uid ^ tcred->uid) && > - !capable(CAP_KILL)) { > + !kill_ok_by_cred(t)) { > switch (sig) { > case SIGCONT: > sid = task_session(t);
--
unsubscribe notice
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to
majordomo@vger.kernel.org
More majordomo info at
http://vger.kernel.org/majordomo-info.html
Please read the FAQ at
http://www.tux.org/lkml/
Previous message: [
thread
] [
date
] [
author
]
Next message: [
thread
] [
date
] [
author
]
Messages in current thread:
[RFC 0/5] user namespaces: start clamping down
, Serge E. Hallyn
, (Fri Dec 17, 8:22 am)
[RFC 1/5] user namespaces: Add a user_namespace as creator ...
, Serge E. Hallyn
, (Fri Dec 17, 8:24 am)
[RFC 2/5] user namespaces: make capabilities relative to t ...
, Serge E. Hallyn
, (Fri Dec 17, 8:25 am)
[RFC 3/5] user namespaces: allow sethostname in a container
, Serge E. Hallyn
, (Fri Dec 17, 8:26 am)
[RFC 4/5] user namespaces: allow killing tasks in your own ...
, Serge E. Hallyn
, (Fri Dec 17, 8:26 am)
[RFC 5/5] user namespaces: Allow ptrace from non-init user ...
, Serge E. Hallyn
, (Fri Dec 17, 8:27 am)
Re: [RFC 1/5] user namespaces: Add a user_namespace as cre ...
, Alexey Dobriyan
, (Fri Dec 17, 8:56 am)
Re: [RFC 1/5] user namespaces: Add a user_namespace as cre ...
, Alexey Dobriyan
, (Fri Dec 17, 9:00 am)
Re: [RFC 1/5] user namespaces: Add a user_namespace as cre ...
, Serge Hallyn
, (Fri Dec 17, 9:12 am)
Re: [RFC 1/5] user namespaces: Add a user_namespace as cre ...
, Serge Hallyn
, (Fri Dec 17, 9:17 am)
Re: [RFC 1/5] user namespaces: Add a user_namespace as cre ...
, Greg KH
, (Fri Dec 17, 10:31 am)
Re: [RFC 1/5] user namespaces: Add a user_namespace as cre ...
, Eric W. Biederman
, (Fri Dec 17, 12:26 pm)
Re: [RFC 4/5] user namespaces: allow killing tasks in your ...
, Eric W. Biederman
, (Fri Dec 17, 12:31 pm)
Re: [RFC 5/5] user namespaces: Allow ptrace from non-init ...
, Eric W. Biederman
, (Fri Dec 17, 12:45 pm)
Re: [RFC 1/5] user namespaces: Add a user_namespace as cre ...
, Serge Hallyn
, (Fri Dec 17, 12:46 pm)
Re: [RFC 1/5] user namespaces: Add a user_namespace as cre ...
, Greg KH
, (Fri Dec 17, 12:57 pm)
Re: [RFC 1/5] user namespaces: Add a user_namespace as cre ...
, Greg KH
, (Fri Dec 17, 12:58 pm)
Re: [RFC 5/5] user namespaces: Allow ptrace from non-init ...
, Serge Hallyn
, (Fri Dec 17, 1:04 pm)
Re: [RFC 4/5] user namespaces: allow killing tasks in your ...
, Serge E. Hallyn
, (Fri Dec 17, 1:09 pm)
Re: [RFC 4/5] user namespaces: allow killing tasks in your ...
, Eric W. Biederman
, (Fri Dec 17, 1:17 pm)
Re: [RFC 4/5] user namespaces: allow killing tasks in your ...
, Serge E. Hallyn
, (Fri Dec 17, 1:22 pm)
Re: [RFC 1/5] user namespaces: Add a user_namespace as cre ...
, Eric W. Biederman
, (Fri Dec 17, 1:40 pm)
Re: [RFC 1/5] user namespaces: Add a user_namespace as cre ...
, Greg KH
, (Fri Dec 17, 4:15 pm)
Re: [RFC 1/5] user namespaces: Add a user_namespace as cre ...
, Eric W. Biederman
, (Fri Dec 17, 11:32 pm)
Re: [RFC 1/5] user namespaces: Add a user_namespace as cre ...
, Greg KH
, (Sat Dec 18, 10:56 am)
Re: [RFC 4/5] user namespaces: allow killing tasks in your ...
, Serge E. Hallyn
, (Fri Dec 31, 9:45 pm)
Re: [RFC 5/5] user namespaces: Allow ptrace from non-init ...
, Serge E. Hallyn
, (Fri Dec 31, 9:47 pm)
Re: [RFC 4/5] user namespaces: allow killing tasks in your ...
, Eric W. Biederman
, (Sat Jan 1, 4:10 pm)
Re: [RFC 4/5] user namespaces: allow killing tasks in your ...
, Serge E. Hallyn
, (Sun Jan 2, 7:39 am)
Navigation
Create content
Mailing list archives
Recent posts
Popular discussions
linux-kernel
:
Paul Turner
[tg_shares_up rewrite v4 11/11] sched: update tg->shares after cpu.shares write
Mr. James W. Laferriere
Re: Linux 2.6.25-rc1 , syntax error near unexpected token `;'
Chuck Ebbert
Re: PCI: Unable to reserve mem region problem
Linus Torvalds
Linux 2.6.34-rc4
Mingming Cao
Re: [RFC 1/4] Large Blocksize support for Ext2/3/4
git
:
Ralf Wildenhues
[PATCH] Fix typos in the documentation
Len Brown
Re: fatal: unable to create '.git/index': File exists
Adeodato
Bazaar's patience diff as GIT_EXTERNAL_DIFF
Denis Bueno
Git clone error
Johannes Schindelin
Re: [PATCH 2/4] Add functions get_relative_cwd() and is_inside_dir()
git-commits-head
:
Linux Kernel Mailing List
ASoC: fix registration of the SoC card in the Freescale MPC8610 drivers
Linux Kernel Mailing List
drivers/acpi: use kasprintf
Linux Kernel Mailing List
nfsd41: sanity check client drc maxreqs
Linux Kernel Mailing List
bnx2x: Moving includes
Linux Kernel Mailing List
V4L/DVB: gspca - sonixj: Adjust minor values of sensor ov7630. - set the color ga...
openbsd-misc
:
Sevan / Venture37
Re: This is what Linus Torvalds calls openBSD crowd
Netmaffia.hu
Tini Lányok AKCIÓBAN OTTHON
Sam Fourman Jr.
Re: Help with Altell PC6700
Siju George
This is what Linus Torvalds calls openBSD crowd
Darrin Chandler
Re: OT: Python (was Re: vi in /bin)
linux-netdev
:
Kurt Van Dijck
Re: [PATCH net-next-2.6 1/2] can: add driver for Softing card
Eric Dumazet
Re: [PATCH net-next-2.6] net: Introduce skb_orphan_try()
Jamie Lokier
Re: POHMELFS high performance network filesystem. Transactions, failover, performa...
Jarek Poplawski
Re: socket api problem: can't bind an ipv6 socket to ::ffff:0.0.0.0
David Miller
Re: [PATCH v2] net: typos in comments in include/linux/igmp.h
Colocation donated by:
Syndicate