diff options
author | David S. Miller <davem@davemloft.net> | 2016-08-14 21:09:11 -0700 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2016-08-14 21:09:11 -0700 |
commit | a878c020172a7cd9fb2f691b95e2c30084a50cb4 (patch) | |
tree | ad2cc7b3534b8767f507caf65b093fe4fca43fa9 /fs/orangefs/symlink.c | |
parent | d16d9d2ad778e8247617c10703dfd749c776f242 (diff) | |
parent | e79c6a4fc923eed2bdd3b716e0f01414847db90a (diff) |
Merge branch 'proc-per-ns'
Dmitry Torokhov says:
====================
Make /proc per net namespace objects belong to container
Currently [almost] all /proc objects belong to the global root, even if
data belongs to a given namespace within a container and (at least for
sysctls) we work around permssions checks to allow container's root to
access the data.
This series changes ownership of net namespace /proc objects
(/proc/net/self/* and /proc/sys/net/*) to be container's root and not
global root when there exists mapping for container's root in user
namespace.
This helps when running Android CTS in a container, but I think it makes
sense regardless.
Changes from V1:
- added fix for crash when !CONFIG_NET_NS (new patch #1)
- addressed Eric'c comments for error handling style in patch #3 and
added his Ack
- adjusted patch #2 to use the same style of erro handling
- sent out as series instead of separate patches
====================
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'fs/orangefs/symlink.c')
0 files changed, 0 insertions, 0 deletions