diff options
| author | Eric W. Biederman <ebiederm@xmission.com> | 2014-12-06 02:36:04 +0100 |
|---|---|---|
| committer | Eric W. Biederman <ebiederm@xmission.com> | 2014-12-12 01:07:06 +0100 |
| commit | 66d2f338ee4c449396b6f99f5e75cd18eb6df272 (patch) | |
| tree | 6ee765ac11630eb41207b1b4f4202c4d602fa459 /kernel/power | |
| parent | userns: Add a knob to disable setgroups on a per user namespace basis (diff) | |
| download | linux-66d2f338ee4c449396b6f99f5e75cd18eb6df272.tar.xz linux-66d2f338ee4c449396b6f99f5e75cd18eb6df272.zip | |
userns: Allow setting gid_maps without privilege when setgroups is disabled
Now that setgroups can be disabled and not reenabled, setting gid_map
without privielge can now be enabled when setgroups is disabled.
This restores most of the functionality that was lost when unprivileged
setting of gid_map was removed. Applications that use this functionality
will need to check to see if they use setgroups or init_groups, and if they
don't they can be fixed by simply disabling setgroups before writing to
gid_map.
Cc: stable@vger.kernel.org
Reviewed-by: Andy Lutomirski <luto@amacapital.net>
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
Diffstat (limited to 'kernel/power')
0 files changed, 0 insertions, 0 deletions