[RFC 0/5] user namespaces: start clamping down

Following is the next version of the user namespace patchset. The core of the set is patch 2, originally conceived of and implemented by Eric Biederman. The concept is to target capabilities at user namespaces. A task's capabilities are now ...

Message posted on the December 17th, 2010 - 10:30 AM ET

Research and Markets: Introduction to Computing Using Python: An Application Development Focus

Dublin - Research and Markets (http://www.researchandmarkets.com/research/4x77nq/introduction_to_co) has announced the addition of John Wiley and Sons Ltd's new book "Introduction to Computing Using Python: An Application ...

Press published on the May 3rd, 2012 - 3:43 AM ET

OSGi Alliance Releases Four New OSGi Specifications

Core, Enterprise, Residential and Compendium specifications now available for download.

Press published on the June 13th, 2012 - 6:00 AM ET

Progress Software Demos Advanced Business Rules Control at Gartner Business Process Management Summit

Progress Corticon Rules Engine Delivers Improved decision management and increased ROI.

Press published on the March 14th, 2012 - 6:00 AM ET

user namespaces: fix some uid/privilege leaks

The set of patches which I'm currently aiming to get upstream is queued at: http://kernel.ubuntu.com/git?p=serge/linux-2.6.git;a=shortlog;h=refs/heads/userns In the below descriptions, it helps to remember that a task can have more privilege to his ...

Message posted on the October 18th, 2011 - 6:00 PM ET

[PATCH] userns: Support fuse interacting with multiple user namespaces

Use kuid_t and kgid_t in struct fuse_conn and struct fuse_mount_data. The connection between between a fuse filesystem and a fuse daemon is established when a fuse filesystem is mounted and provided with a file descriptor the fuse daemon created by ...

Message posted on the October 31st, 2012 - 1:40 AM ET

user namespaces: fix some uid/privilege leaks

The previous submission of these patches, and review comments, can be seen in the thread starting here: https://lkml.org/lkml/2011/10/18/463 . Since then, patches 0001-pid_ns-ensure-pid-is-not-freed-during-kill_pid_info_.patch and ...

Message posted on the November 4th, 2011 - 5:30 PM ET

user namespaces v3: continue targetting capabilities

This was last sent Jul 26, and incorporates feedback from that thread. The last patch, 0015-make-kernel-signal.c-user-ns-safe-v2.patch, is new, so could stand extra scrutiny. This patchset is a basis for Eric's set which allows assigning a ...

Message posted on the September 2nd, 2011 - 4:00 PM ET

user namespace: make signal.c respect user namespaces (v5)

ipc/mqueue.c: for __SI_MESQ, convert the uid being sent to recipient's user namespace. (new, thanks Oleg) __send_signal: convert current's uid to the recipient's user namespace for any siginfo which is not SI_FROMKERNEL (patch from Oleg, thanks ...

Message posted on the November 17th, 2011 - 12:00 AM ET

Summary of security bugs (now fixed) in user namespaces

I previously reported these bugs privatley. I'm summarizing them for the historical record. These bugs were never exploitable on a default-configured released kernel, but some 3.8 versions are vulnerable depending on configuration. Bug 1: chroot ...

Message posted on the April 13th, 2013 - 1:20 PM ET

[PATCH] user namespace: make signal.c respect user namespaces

__send_signal: convert the uid being sent in SI_USER to the target task's user namespace. do_notify_parent and do_notify_parent_cldstop: map task's uid to parent's user namespace ptrace_signal: map parent's uid into current's user namespace before ...

Message posted on the September 19th, 2011 - 5:50 PM ET

[PATCH 0/14] user namespaces v2: continue targetting capabilities

Hi, here is a set of patches to continue targetting capabilities where appropriate. This set goes about as far as is possible without making the VFS user namespace aware, meaning that the VFS can provide a namespaced view of userids, i.e ...

Message posted on the July 26th, 2011 - 3:00 PM ET

[RFC PATCH 0/14] user namespaces: continue targetting capabilities

Hi, here is a set of patches to continue targetting capabilities where appropriate. This set goes about as far as is possible without making the VFS user namespace aware, meaning that the VFS can provide a namespaced view of userids, i.e ...

Message posted on the July 12th, 2011 - 7:40 PM ET

[GIT PULL] user namespace and namespace infrastructure changes for 3.8

Linus, Please pull the for-linus git tree from: git://git.kernel.org:/pub/scm/linux/kernel/git/ebiederm/user-namespace.git for-linus HEAD: 5155040ed349950e16c093ba8e65ad534994df2a userns: Fix typo in description of the limitation of ...

Message posted on the December 17th, 2012 - 6:20 PM ET