summaryrefslogtreecommitdiff
path: root/ipc
diff options
context:
space:
mode:
authorEric W. Biederman <ebiederm@xmission.com>2013-03-22 04:08:05 -0700
committerEric W. Biederman <ebiederm@xmission.com>2013-03-27 07:50:05 -0700
commit132c94e31b8bca8ea921f9f96a57d684fa4ae0a9 (patch)
tree52db12073a31f62301367416b2a3afec185975ef /ipc
parent90563b198e4c6674c63672fae1923da467215f45 (diff)
downloadlinux-3.10-132c94e31b8bca8ea921f9f96a57d684fa4ae0a9.tar.gz
linux-3.10-132c94e31b8bca8ea921f9f96a57d684fa4ae0a9.tar.bz2
linux-3.10-132c94e31b8bca8ea921f9f96a57d684fa4ae0a9.zip
vfs: Carefully propogate mounts across user namespaces
As a matter of policy MNT_READONLY should not be changable if the original mounter had more privileges than creator of the mount namespace. Add the flag CL_UNPRIVILEGED to note when we are copying a mount from a mount namespace that requires more privileges to a mount namespace that requires fewer privileges. When the CL_UNPRIVILEGED flag is set cause clone_mnt to set MNT_NO_REMOUNT if any of the mnt flags that should never be changed are set. This protects both mount propagation and the initial creation of a less privileged mount namespace. Cc: stable@vger.kernel.org Acked-by: Serge Hallyn <serge.hallyn@canonical.com> Reported-by: Andy Lutomirski <luto@amacapital.net> Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
Diffstat (limited to 'ipc')
0 files changed, 0 insertions, 0 deletions