[kernel-hardening] Re: + ipc-introduce-shm_rmid_forced-sysctl.patch added to -mm tree

Vasiliy Kulikov
2011-07-03T18:00:28Z

On Thu, Jun 30, 2011 at 17:57 +0400, Vasiliy Kulikov wrote:
> > So shp should store a reference to the struct pid, which you can check
> > here? I think that'll do exactly what you need.
>
> Documentation/namespaces/compatibility-list.txt says that IPC and PID
> namespaces have not been fully separated yet.

Looks like I've misunderstood the documentation. It says that
identifiers from the same ipc namespace shouldn't travel between
different pid namespaces, not about incomplete implementaiton. So yes,
storing pid or task will help. I'll send a patch after some testing.

Thanks,

--
Vasiliy Kulikov
http://www.openwall.com - bringing security into open computing environments