From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Serge E. Hallyn" Subject: Re: [PATCH] ptrace: allow restriction of ptrace scope Date: Thu, 17 Jun 2010 17:50:43 -0500 Message-ID: <20100617225043.GA2492@hallyn.com> References: <20100616221833.GM24749@outflux.net> <20100617165940.GU24749@outflux.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Return-path: Content-Disposition: inline In-Reply-To: Sender: linux-doc-owner@vger.kernel.org To: "Eric W. Biederman" Cc: Kees Cook , linux-kernel@vger.kernel.org, Randy Dunlap , Andrew Morton , Jiri Kosina , Dave Young , Martin Schwidefsky , Roland McGrath , Oleg Nesterov , "H. Peter Anvin" , David Howells , Ingo Molnar , Peter Zijlstra , linux-doc@vger.kernel.org, Linux Containers List-Id: containers.vger.kernel.org Quoting Eric W. Biederman (ebiederm@xmission.com): > Kees Cook writes: > Somewhere Serge has a git tree where he started making the capabilities FWIW I believe the latest one is http://git.kernel.org/?p=linux/kernel/git/sergeh/linux-cr.git;a=shortlog;h=refs/heads/userns.feb16.1 I (/we) should get back to that... Though waiting for certain other bits to settle (i.e. tagged sysfs and user-ns-safe SCM_CREDENTIALS) isn't a bad thing. -serge