Linux Container Development
 help / color / mirror / Atom feed
 messages from 2014-11-18 14:55:02 to 2014-12-15 20:11:59 UTC [more...]

[PATCH v2] userns: Disallow setgroups unless the gid_map writer is privileged
 2014-12-15 20:11 UTC  (70+ messages)
                ` [CFT][PATCH 1/3] userns: Avoid problems with negative groups
                  ` [CFT][PATCH 2/3] userns: Add a knob to disable setgroups on a per user namespace basis
                      ` [CFT][PATCH 3/3] userns: Unbreak the unprivileged remount tests
                                      ` [CFT][PATCH 1/7] userns: Document what the invariant required for safe unprivileged mappings
                                        ` [CFT][PATCH 2/7] userns: Don't allow setgroups until a gid mapping has been setablished
                                        ` [CFT][PATCH 3/7] userns: Don't allow unprivileged creation of gid mappings
                                        ` [CFT][PATCH 4/7] userns: Check euid no fsuid when establishing an unprivileged uid mapping
                                        ` [CFT][PATCH 5/7] userns: Only allow the creator of the userns unprivileged mappings
                                        ` [CFT][PATCH 6/7] userns: Add a knob to disable setgroups on a per user namespace basis
                                                              ` [CFT][PATCH 1/8] userns: Document what the invariant required for safe unprivileged mappings
                                                                  ` [CFT][PATCH 2/8] userns: Don't allow setgroups until a gid mapping has been setablished
                                                                  ` [CFT][PATCH 3/8] userns: Don't allow unprivileged creation of gid mappings
                                                                  ` [CFT][PATCH 4/8] userns: Check euid no fsuid when establishing an unprivileged uid mapping
                                                                  ` [CFT][PATCH 5/8] userns: Only allow the creator of the userns unprivileged mappings
                                                                  ` [CFT][PATCH 6/8] userns: Rename id_map_mutex to userns_state_mutex
                                                                  ` [CFT][PATCH 7/8] userns: Add a knob to disable setgroups on a per user namespace basis
                                                                  ` [CFT][PATCH 8/8] userns: Allow setting gid_maps without privilege when setgroups is disabled
                                                                  ` [CFT] Can I get some Tested-By's on this series?
                                                                                    ` [CFT][PATCH v6] userns: Add a knob to disable setgroups on a per user namespace basis
                                                                                        ` [PATCH 0/2] Documenting user namespace changes
                                                                                          ` [PATCH 1/2] proc.5: Document /proc/[pid]/setgroups
                                                                                            ` [PATCH 2/2] user_namespaces.7: Update the documention to reflect the fixes for negative groups
                                        ` [CFT][PATCH 7/7] userns: Allow setting gid_maps without privilege when setgroups is disabled

[PATCH review 00/18] userns: review of bug fixes for 3.19-rcX
 2014-12-15  2:25 UTC  (24+ messages)
  ` [PATCH review 01/18] mnt: Implicitly add MNT_NODEV on remount when it was implicitly added by mount
  ` [PATCH review 02/18] mnt: Update unprivileged remount test
  ` [PATCH review 03/18] umount: Disallow unprivileged mount force
  ` [PATCH review 04/18] umount: Do not allow unmounting rootfs
  ` [PATCH review 05/18] mnt: Move the clear of MNT_LOCKED from copy_tree to it's callers
  ` [PATCH review 06/18] mnt: Carefully set CL_UNPRIVILEGED in clone_mnt
  ` [PATCH review 07/18] mnt: Clear mnt_expire during pivot_root
  ` [PATCH review 08/18] groups: Consolidate the setgroups permission checks
  ` [PATCH review 09/18] userns: Document what the invariant required for safe unprivileged mappings
  ` [PATCH review 10/18] userns: Don't allow setgroups until a gid mapping has been setablished
  ` [PATCH review 11/18] userns: Don't allow unprivileged creation of gid mappings
  ` [PATCH review 12/18] userns: Check euid no fsuid when establishing an unprivileged uid mapping
  ` [PATCH review 13/18] userns: Only allow the creator of the userns unprivileged mappings
  ` [PATCH review 14/18] userns: Rename id_map_mutex to userns_state_mutex
  ` [PATCH review 15/18] userns: Add a knob to disable setgroups on a per user namespace basis
  ` [PATCH review 16/18] userns: Allow setting gid_maps without privilege when setgroups is disabled
  ` [PATCH review 17/18] userns; Correct the comment in map_write
  ` [PATCH review 18/18] userns: Unbreak the unprivileged remount tests

[PATCHv3 0/8] CGroup Namespaces
 2014-12-14 23:05 UTC  (14+ messages)
    ` [PATCHv3 1/8] kernfs: Add API to generate relative kernfs path
    ` [PATCHv3 2/8] sched: new clone flag CLONE_NEWCGROUP for cgroup namespace
    ` [PATCHv3 3/8] cgroup: add function to get task's cgroup on default hierarchy
    ` [PATCHv3 4/8] cgroup: export cgroup_get() and cgroup_put()
    ` [PATCHv3 5/8] cgroup: introduce cgroup namespaces
    ` [PATCHv3 6/8] cgroup: cgroup namespace setns support
    ` [PATCHv3 7/8] cgroup: mount cgroupns-root when inside non-init cgroupns
    ` [PATCHv3 8/8] cgroup: Add documentation for cgroup namespaces

[RESEND][PATCH] userns: use macro instead of magic number for max userns level
 2014-12-12 10:02 UTC 

Limiting access to abstract unix domain sockets
 2014-12-12  3:38 UTC  (5+ messages)

Mail delivery failed: returning message to sender
 2014-12-11 17:07 UTC 

Undeliverable: Details facture 62824371217
 2014-12-10 14:32 UTC 

[RFC] lsm: namespace hooks
 2014-12-09 16:13 UTC  (15+ messages)

from: Adam Richter
 2014-12-09  4:41 UTC 

Fwd: Details de la dette 78730858
 2014-12-09  4:08 UTC 

Undelivered Mail Returned to Sender
 2014-12-09  3:22 UTC 

Mail delivery failed: returning message to sender
 2014-12-08 12:51 UTC 

Undeliverable: Informations de livraison No352685852
 2014-12-08  7:20 UTC 

Undeliverable: Fwd: Dette 3775669
 2014-12-07 21:03 UTC 

Undeliverable: Re: Details facture 687888811
 2014-12-07  6:36 UTC 

Undeliverable: Dette 401602980
 2014-12-07  4:05 UTC 

LXC 1.0.7 has been released!
 2014-12-06 10:35 UTC 

Considered UNSOLICITED BULK EMAIL, apparently from you
 2014-12-05 23:34 UTC 

Undeliverable: Information sur le paiement N170719
 2014-12-05 20:45 UTC 

[RFC PATCH net-next v3 0/4] netns: allow to identify peer netns
 2014-12-04 16:21 UTC  (6+ messages)
  ` [PATCH net-next v4 "

[PATCH v9 0/3] ns, procfs: pid conversion between ns and showing pidns hierarchy
 2014-12-04 12:23 UTC  (5+ messages)
  ` [PATCH v9 1/3] procfs: show hierarchy of pid namespace
  ` [PATCH v9 2/3] /proc/PID/status: show all sets of pid according to ns
  ` [PATCH v9 3/3] Documentation: add docs for /proc/pidns_hierarchy

AWS Users Leads
 2014-12-03 16:56 UTC 

[PATCHv2 0/7] CGroup Namespaces
 2014-12-02 19:14 UTC  (5+ messages)

What's the status of 87b47932 patch - mnt: Implicitly add MNT_NODEV on remount as we do on mount
 2014-12-02 13:12 UTC  (16+ messages)
      ` [CFT][PATCH] mnt: Implicitly add MNT_NODEV on remount when it was implicitly added by mount

[Announce] Checkpoint-restore tool v1.4
 2014-12-01 13:01 UTC 

systemd-cgroups-agent not working in containers
 2014-11-30 22:31 UTC  (8+ messages)
  ` [systemd-devel] "

[PATCH v2] userns: Disallow setgroups unless the gid_map writer is privileged
 2014-11-29 17:26 UTC 

[GIT PULL] namespace updates for v3.17-rc1
 2014-11-29 16:58 UTC  (8+ messages)

[RFC PATCH] userns: Disallow setgroups unless the gid_map writer is privileged
 2014-11-29 16:24 UTC  (3+ messages)

[RFC PATCH] userns: Disallow setgroups unless the gid_map writer is privileged
 2014-11-28 22:53 UTC 

[CFT][PATCH] userns: Avoid problems with negative groups
 2014-11-28 17:11 UTC  (7+ messages)
                    ` [CFT][PATCH v2] "

[RFC] LSM/Smack namespace work in progress
 2014-11-27 14:01 UTC 

[PATCH v8 0/2] ns, procfs: pid conversion between ns and showing pidns hierarchy
 2014-11-24  9:47 UTC  (6+ messages)
` [PATCH v8 1/2] procfs: show hierarchy of pid namespace

Fw:Swift
 2014-11-21 13:17 UTC 

Miglior Software Fare soldi
 2014-11-20 15:30 UTC 

serve new & original IC parts with ex-factory price
 2014-11-19  8:31 UTC 

Segui i tuoi veicoli in tempo reale
 2014-11-18 14:55 UTC 


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox