]> git.hungrycats.org Git - linux/commit
projects / linux / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 366c19c) | patch
scm: Require CAP_SYS_ADMIN over the current pidns to spoof pids.
authorEric W. Biederman <ebiederm@xmission.com>
Fri, 15 Mar 2013 08:03:33 +0000 (01:03 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 5 Apr 2013 16:26:01 +0000 (09:26 -0700)
commit882dc231e68ddd6ecc94fdb094c104b1ebe538c7
tree4be283b4d170e5a48bcf2a6d3c9e26fa4a9868cbtree | snapshot
parent366c19c14bfdc64a66f4eb5010fcdbb6a6a9746ccommit | diff
scm: Require CAP_SYS_ADMIN over the current pidns to spoof pids.

commit 92f28d973cce45ef5823209aab3138eb45d8b349 upstream.

Don't allow spoofing pids over unix domain sockets in the corner
cases where a user has created a user namespace but has not yet
created a pid namespace.

Reported-by: Andy Lutomirski <luto@amacapital.net>
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/core/scm.c diff | blob | history
Linux kernels and configurations used by Zygo.