From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <linux-kernel-owner@vger.kernel.org>
Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand
        id S1752159AbdKFVdT (ORCPT <rfc822;w@1wt.eu>);
        Mon, 6 Nov 2017 16:33:19 -0500
Received: from mail-it0-f52.google.com ([209.85.214.52]:50537 "EHLO
        mail-it0-f52.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org
        with ESMTP id S1751674AbdKFVdR (ORCPT
        <rfc822;linux-kernel@vger.kernel.org>);
        Mon, 6 Nov 2017 16:33:17 -0500
X-Google-Smtp-Source: ABhQp+T7fPq8Uv85NogJxP9R4vvfcdWVCEYKiCJkFXki/edAMuCwmnrZ2hlYkwAd0Jd3PtmuKGCLDg==
Message-ID: <1510003994.736.0.camel@gmail.com>
Subject: Re: [kernel-hardening] Re: [PATCH resend 2/2] userns: control
 capabilities of some user namespaces
From: Daniel Micay <danielmicay@gmail.com>
To: "Serge E. Hallyn" <serge@hallyn.com>,
        Mahesh Bandewar
         =?UTF-8?Q?=28=E0=A4=AE=E0=A4=B9=E0=A5=87=E0=A4=B6_?=
         =?UTF-8?Q?=E0=A4=AC=E0=A4=82=E0=A4=A1=E0=A5=87=E0=A4=B5=E0=A4=BE?=
         =?UTF-8?Q?=E0=A4=B0=29?= <maheshb@google.com>
Cc: Mahesh Bandewar <mahesh@bandewar.net>,
        LKML <linux-kernel@vger.kernel.org>, Netdev <netdev@vger.kernel.org>,
        Kernel-hardening <kernel-hardening@lists.openwall.com>,
        Linux API <linux-api@vger.kernel.org>,
        Kees Cook <keescook@chromium.org>,
        "Eric W . Biederman" <ebiederm@xmission.com>,
        Eric Dumazet <edumazet@google.com>, David Miller <davem@davemloft.net>
Date: Mon, 06 Nov 2017 16:33:14 -0500
In-Reply-To: <20171106150302.GA26634@mail.hallyn.com>
References: <20171103004436.40026-1-mahesh@bandewar.net>
         <20171104235346.GA17170@mail.hallyn.com>
         <CAF2d9jg1tZz-hnVBeXm3geq7jSBt5v5w6+p5B1V-7huS4qbMBA@mail.gmail.com>
         <20171106150302.GA26634@mail.hallyn.com>
Content-Type: text/plain; charset="UTF-8"
X-Mailer: Evolution 3.26.2 
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit
Sender: linux-kernel-owner@vger.kernel.org
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

Substantial added attack surface will never go away as a problem. There
aren't a finite number of vulnerabilities to be found.