Linux Container Development
 help / color / mirror / Atom feed
 messages from 2024-06-09 10:40:24 to 2026-04-27 22:35:03 UTC [more...]

[PATCH v9 0/5] proc: subset=pid: Relax check of mount visibility
 2026-04-27 22:34 UTC  (26+ messages)
  ` [PATCH v9 1/5] namespace: record fully visible mounts in list
  ` [PATCH v9 2/5] proc: subset=pid: Show /proc/self/net only for CAP_NET_ADMIN
  ` [PATCH v9 3/5] proc: Disable cancellation of subset=pid option
  ` [PATCH v9 4/5] proc: Skip the visibility check if subset=pid is used
  ` [PATCH v9 5/5] docs: proc: add documentation about mount restrictions
  ` [PATCH v10 0/7] proc: subset=pid: Relax check of mount visibility
    ` [PATCH v10 1/7] namespace: record fully visible mounts in list
    ` [PATCH v10 2/7] fs: move SB_I_USERNS_VISIBLE to FS_USERNS_MOUNT_RESTRICTED
    ` [PATCH v10 3/7] sysfs: remove trivial sysfs_get_tree() wrapper
    ` [PATCH v10 4/7] proc: subset=pid: Show /proc/self/net only for CAP_NET_ADMIN
    ` [PATCH v10 5/7] proc: prevent reconfiguring subset=pid
    ` [PATCH v10 6/7] proc: handle subset=pid separately in userns visibility checks
    ` [PATCH v10 7/7] docs: proc: add documentation about mount restrictions

[PATCH 0/2] mount: add OPEN_TREE_NAMESPACE
 2026-02-19 23:42 UTC  (9+ messages)

[GIT PULL 05/17 for v6.19] namespaces
 2025-12-03 10:07 UTC  (3+ messages)

fanotify sb/mount watch inside userns (Was: [PATCH RFC] : fhandle: relax open_by_handle_at() permission checks)
 2025-04-24 11:28 UTC  (3+ messages)

[RFC PATCH v1 0/3] Expose Landlock domain IDs via pidfd
 2025-01-31 17:35 UTC 

CFP for the containers and checkpoint-restore micro-conference at LPC 2024 mailing/containers
 2024-09-13 10:39 UTC  (2+ messages)

[PATCH v2 0/4] Introduce user namespace capabilities
 2024-06-28 14:45 UTC  (32+ messages)
` [PATCH v2 1/4] capabilities: Add "
` [PATCH v2 2/4] capabilities: Add securebit to restrict userns caps
` [PATCH v2 3/4] capabilities: Add sysctl to mask off "
` [PATCH v2 4/4] bpf,lsm: Allow editing capabilities in BPF-LSM hooks


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox