diff options
author | Eric W. Biederman <ebiederm@xmission.com> | 2013-01-31 03:50:54 +0100 |
---|---|---|
committer | Eric W. Biederman <ebiederm@xmission.com> | 2013-02-13 15:00:52 +0100 |
commit | 9fd973e085f7759f710603422b2e11ad5f2e000d (patch) | |
tree | ab037487925db629c9e3c5b45475f0e97954fd1d /lib/string_helpers.c | |
parent | afs: Support interacting with multiple user namespaces (diff) | |
download | linux-9fd973e085f7759f710603422b2e11ad5f2e000d.tar.xz linux-9fd973e085f7759f710603422b2e11ad5f2e000d.zip |
coda: Restrict coda messages to the initial pid namespace
Remove the slight chance that pids in coda messages will be
interpreted in the wrong pid namespace.
- Explicitly send all pids in coda messages in the initial pid
namespace.
- Only allow mounts from processes in the initial pid namespace.
- Only allow processes in the initial pid namespace to open the coda
character device to communicate with coda.
Cc: Jan Harkes <jaharkes@cs.cmu.edu>
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
Diffstat (limited to 'lib/string_helpers.c')
0 files changed, 0 insertions, 0 deletions