Serge E. Hallyn
59607db367
userns: add a user_namespace as creator/owner of uts_namespace ...
The expected course of development for user namespaces targeted
capabilities is laid out at https://wiki.ubuntu.com/UserNamespace .
Goals:
- Make it safe for an unprivileged user to unshare namespaces. They
will be privileged with respect to the new namespace, but this should
only include resources which the unprivileged user already owns.
- Provide separate limits and accounting for userids in different
namespaces.
Status:
Currently (as of 2.6.38) you can clone with the CLONE_NEWUSER flag to
get a new user namespace if you have the CAP_SYS_ADMIN, CAP_SETUID, and
CAP_SETGID capabilities. What this gets you is a whole new set of
userids, meaning that user 500 will have a different 'struct user' in
your namespace than in other namespaces. So any accounting information
stored in struct user will be unique to your namespace.
However, throughout the kernel there are checks which
- simply check for a capability. Since root in a child namespace
has all capabilities, this means that a child namespace is not
constrained.
- simply compare uid1 == uid2. Since these are the integer uids,
uid 500 in namespace 1 will be said to be equal to uid 500 in
namespace 2.
As a result, the lxc implementation at lxc.sf.net does not use user
namespaces. This is actually helpful because it leaves us free to
develop user namespaces in such a way that, for some time, user
namespaces may be unuseful.
Bugs aside, this patchset is supposed to not at all affect systems which
are not actively using user namespaces, and only restrict what tasks in
child user namespace can do. They begin to limit privilege to a user
namespace, so that root in a container cannot kill or ptrace tasks in the
parent user namespace, and can only get world access rights to files.
Since all files currently belong to the initila user namespace, that means
that child user namespaces can only get world access rights to *all*
files. While this temporarily makes user namespaces bad for system
containers, it starts to get useful for some sandboxing.
I've run the 'runltplite.sh' with and without this patchset and found no
difference.
This patch:
copy_process() handles CLONE_NEWUSER before the rest of the namespaces.
So in the case of clone(CLONE_NEWUSER|CLONE_NEWUTS) the new uts namespace
will have the new user namespace as its owner. That is what we want,
since we want root in that new userns to be able to have privilege over
it.
Changelog:
Feb 15: don't set uts_ns->user_ns if we didn't create
a new uts_ns.
Feb 23: Move extern init_user_ns declaration from
init/version.c to utsname.h.
Signed-off-by: Serge E. Hallyn <serge.hallyn@canonical.com>
Acked-by: "Eric W. Biederman" <ebiederm@xmission.com>
Acked-by: Daniel Lezcano <daniel.lezcano@free.fr>
Acked-by: David Howells <dhowells@redhat.com>
Cc: James Morris <jmorris@namei.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2011-03-23 19:46:59 -07:00
Merge branches 'aaci', 'mmci-dma', 'pl' and 'pl011' into drivers
2011-03-17 11:04:51 +00:00
libceph: add lingering request and watch/notify event framework
2011-03-22 11:33:55 -07:00
Merge branch 'for-linus/2639/i2c-2' of git://git.fluff.org/bjdooks/linux
2011-03-22 10:05:27 -07:00
Merge branch 'next' into for-linus
2011-03-18 23:38:50 -07:00
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input
2011-03-19 22:27:06 -07:00
mmc: dw_mmc: support mmc power control with regulator
2011-03-17 15:35:22 -04:00
Merge branch 'linux-next' of git://git.infradead.org/ubifs-2.6
2011-03-18 10:50:27 -07:00
netfilter: ipset: fix address ranges at hash:*port* types
2011-03-20 15:33:26 +01:00
Merge branch 'tty-next' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty-2.6
2011-03-16 15:11:04 -07:00
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input
2011-03-19 22:27:06 -07:00
ssb: when needed, reject IM input while disabling device
2011-02-18 16:54:54 -05:00
SUNRPC: Convert struct rpc_xprt to use atomic_t counters
2011-03-17 12:38:59 -04:00
Merge branch 'tty-next' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty-2.6
2011-03-16 15:11:04 -07:00
libata: Use 'bool' return value for ata_id_XXX
2011-03-15 02:42:32 -04:00
backlight: add backlight type
2011-03-22 17:43:59 -07:00
block: add @force_kblockd to __blk_run_queue()
2011-03-02 08:48:05 -05:00
blktrace: Remove blk_fill_rwbs_rq.
2011-03-03 10:53:20 -05:00
perf: Add cgroup support
2011-02-16 13:30:48 +01:00
perf: Add cgroup support
2011-02-16 13:30:48 +01:00
mm: compaction: prevent kswapd compacting memory to reduce CPU usage
2011-03-22 17:44:00 -07:00
include/linux/compiler-gcc*.h: unify macro definitions
2011-03-22 17:44:10 -07:00
include/linux/compiler-gcc*.h: unify macro definitions
2011-03-22 17:44:10 -07:00
include/linux/compiler-gcc*.h: unify macro definitions
2011-03-22 17:44:10 -07:00
connector: Convert char *name to const char *name
2011-02-23 13:22:26 -08:00
[CPUFREQ] Remove the pm_message_t argument from driver suspend
2011-03-16 17:54:33 -04:00
crc32: add missed brackets in macro
2011-03-22 17:44:15 -07:00
FS: lookup_mnt() is only used in the core fs routines now
2011-03-21 12:13:10 -04:00
net: dcbnl: Add IEEE app selector value definitions
2011-03-14 17:02:43 -07:00
debugobjects: Add hint for better object identification
2011-03-08 16:10:38 +01:00
Merge branch 'devicetree/next' of git://git.secretlab.ca/git/linux-2.6
2011-03-16 17:28:10 -07:00
firmware: Add DMI entry types to the headers
2011-02-25 12:00:34 -08:00
dw_dmac: Allow src/dst msize & flow controller to be configured at runtime
2011-03-07 01:12:28 +05:30
efivars: Expose efivars functionality to external drivers.
2011-03-14 08:40:51 -07:00
include/linux/err.h: add a function to cast error-pointers to a return value
2011-03-22 17:44:11 -07:00
ethtool: Compat handling for struct ethtool_rxnfc
2011-03-18 15:13:11 -07:00
vfs: Add name to file handle conversion support
2011-03-15 02:21:37 -04:00
ext3: use little-endian bitops
2011-03-23 19:46:17 -07:00
unicore32 machine related: add frame buffer driver for pkunity-v3 soc
2011-03-17 09:19:20 +08:00
New AT_... flag: AT_EMPTY_PATH
2011-03-14 19:12:20 -04:00
New kind of open files - "location only".
2011-03-15 02:21:45 -04:00
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ieee1394/linux1394-2.6
2011-03-21 10:05:22 -07:00
workqueue, freezer: unify spelling of 'freeze' + 'able' to 'freezable'
2011-02-16 17:48:59 +01:00
fs.h: remove 8 bytes of padding from block_device on 64bit builds
2011-03-22 17:44:10 -07:00
tracing: Remove lock_depth from event entry
2011-03-10 10:31:48 -05:00
mm: add __GFP_OTHER_NODE flag
2011-03-22 17:44:05 -07:00
BKL: That's all, folks
2011-03-05 10:56:00 +01:00
Merge branches 'dragonrise', 'hidraw-feature', 'multitouch', 'ntrig', 'roccat', 'upstream' and 'upstream-fixes' into for-linus
2011-03-17 14:31:46 +01:00
hrtimer: Update hrtimer->state documentation
2011-03-10 19:15:58 +01:00
drivers: hwspinlock: add framework
2011-02-17 09:52:03 -08:00
i2c: tegra: Add i2c support
2011-02-23 00:53:26 +00:00
i2c: Drop i2c_adapter.id
2011-03-20 14:50:53 +01:00
ipv6: Convert to use flowi6 where applicable.
2011-03-12 15:08:54 -08:00
ieee80211: add IEEE80211_COUNTRY_STRING_LEN definition
2011-03-09 16:10:56 -05:00
netpoll: remove IFF_IN_NETPOLL flag
2011-02-27 16:11:51 -08:00
headers: use __aligned_xx types for userspace
2011-03-18 15:14:45 -07:00
ipv4: Remove redundant RCU locking in ip_check_mc().
2011-03-10 16:37:26 -08:00
ipv4: Add hash table of interface addresses.
2011-02-18 12:42:28 -08:00
Merge branch 'irq-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip
2011-03-15 19:23:40 -07:00
genirq: Add chip flag to force mask on suspend
2011-03-12 11:12:58 +01:00
genirq: Add desc->irq_data accessor
2011-03-11 14:15:35 +01:00
tty: stop using "delayed_work" in the tty layer
2011-03-22 16:17:32 -07:00
vt: Add virtual console keyboard mode OFF
2011-02-17 11:12:40 -08:00
kstrto*: converting strings to integers done (hopefully) right
2011-03-22 17:44:14 -07:00
KEYS: Add a new keyctl op to reject a key with a specified error code
2011-03-08 11:17:18 +11:00
KEYS: Add a new keyctl op to reject a key with a specified error code
2011-03-08 11:17:18 +11:00
KEYS: Add an iovec version of KEYCTL_INSTANTIATE
2011-03-08 11:17:22 +11:00
kobject.h: fix build when CONFIG_HOTPLUG is disabled
2011-02-18 08:02:10 -08:00
kthread: NUMA aware kthread_create_on_node()
2011-03-22 17:44:01 -07:00
KVM: Fix race between nmi injection and enabling nmi window
2011-03-17 13:08:30 -03:00
leds: add driver for LM3530 ALS
2011-03-22 17:43:59 -07:00
leds: make *struct gpio_led_platform_data.leds const
2011-03-22 17:43:59 -07:00
libata-sff: add ata_sff_queue_work() & ata_sff_queue_delayed_work()
2011-03-14 02:52:41 -04:00
Expand CONFIG_DEBUG_LIST to several other list operations
2011-02-18 11:32:28 -08:00
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ryusuke/nilfs2
2011-03-18 22:33:38 -07:00
memcg: add memcg sanity checks at allocating and freeing pages
2011-03-23 19:46:25 -07:00
pagewalk: only split huge pages when necessary
2011-03-22 17:44:04 -07:00
mm: mm_struct: remove 16 bytes of alignment padding on 64 bit builds
2011-03-22 17:44:03 -07:00
module: explicitly align module_version_attribute structure
2011-02-21 15:21:53 -08:00
msm: mdp: Add support for RGBX 8888 image format.
2011-03-02 13:43:15 -08:00
don't pass 'mounting_here' flag to follow_down()
2011-03-18 09:04:20 -04:00
net: add __rcu annotations to sk_wq and wq
2011-02-22 10:19:31 -08:00
net: introduce rx_handler results and logic around that
2011-03-16 12:53:54 -07:00
netlink: kill eff_cap from struct netlink_skb_parms
2011-03-03 13:32:07 -08:00
NFS: change nfs_writeback_done to return void
2011-03-11 15:38:40 -05:00
NFSv4: Send unmapped uid/gids to the server when using auth_sys
2011-03-11 15:39:27 -05:00
NFSv4: cleanup idmapper functions to take an nfs_server argument
2011-03-11 15:39:26 -05:00
NFSv4.1: implement generic pnfs layer write switch
2011-03-11 15:38:44 -05:00
NFSv4.1: rearrange ->doio args
2011-03-11 15:38:44 -05:00
NFS: Fix a warning in fs/nfs/idmap.c
2011-03-14 18:25:53 -04:00
nilfs2: move NILFS_SUPER_MAGIC to linux/magic.h
2011-03-10 17:29:40 +09:00
cfg80211: add a field for the bitrate of the last rx data packet from a station
2011-03-01 13:48:21 -05:00
Merge branch 'devicetree/next' of git://git.secretlab.ca/git/linux-2.6
2011-03-16 17:28:10 -07:00
drivercore/dt: add a match table pointer to struct device
2011-02-28 01:36:38 -07:00
dt: eliminate of_platform_driver shim code
2011-03-01 09:38:26 -07:00
mm: remove unused TestSetPageLocked() interface
2011-03-22 17:44:03 -07:00
memcg: remove direct page_cgroup-to-page pointer
2011-03-23 19:46:28 -07:00
mm: change __remove_from_page_cache()
2011-03-22 17:44:02 -07:00
ata/pata_arasan_cf: fill dma chan->private from pdata->dma_priv
2011-03-14 02:58:03 -04:00
Merge branch 'linux-next' of git://git.kernel.org/pub/scm/linux/kernel/git/jbarnes/pci-2.6
2011-03-18 10:56:44 -07:00
Merge branch 'linux-next' of git://git.kernel.org/pub/scm/linux/kernel/git/jbarnes/pci-2.6
2011-03-18 10:56:44 -07:00
percpu: Generic support for this_cpu_cmpxchg_double()
2011-02-28 11:20:03 +01:00
perf: Reorder & optimize perf_event_context to remove alignment padding on 64 bit builds
2011-03-16 14:04:14 +01:00
Phonet: kill the ST-Ericsson pipe controller Kconfig
2011-03-09 11:59:33 -08:00
pid: remove the child_reaper special case in init/main.c
2011-03-23 19:46:57 -07:00
netem: revised correlated loss generator
2011-02-24 22:11:56 -08:00
Driver core: convert platform_{get,set}_drvdata to static inline functions
2011-02-18 08:15:51 -08:00
plist: Shrink struct plist_head
2011-03-11 15:13:26 -05:00
PM: Add support for device power domains
2011-03-15 00:43:16 +01:00
PM: Do not create wakeup sysfs files for devices that cannot wake up
2011-03-15 00:43:14 +01:00
PM: Do not create wakeup sysfs files for devices that cannot wake up
2011-03-15 00:43:14 +01:00
proc: make struct proc_dir_entry::namelen unsigned int
2011-03-23 19:46:37 -07:00
Mark ptrace_{traceme,attach,detach} static
2011-03-04 09:23:30 -08:00
pwm_backlight: add check_fb() hook
2011-03-22 17:44:00 -07:00
reiserfs: use little-endian bitops
2011-03-23 19:46:18 -07:00
memcg: simplify the way memory limits are checked
2011-03-23 19:46:23 -07:00
tracing: Add an 'overwrite' trace_option.
2011-03-09 13:52:27 -05:00
rapidio: modify mport ID assignment
2011-03-23 19:46:43 -07:00
rapidio: add architecture specific callbacks
2011-03-23 19:46:41 -07:00
rapidio: fix sysfs config attribute to access 16MB of maint space
2011-02-25 15:07:37 -08:00
mm: simplify anon_vma refcounts
2011-03-22 17:44:03 -07:00
RTC: Cleanup rtc_class_ops->update_irq_enable()
2011-03-09 11:23:37 -08:00
memcg: convert uncharge batching from bytes to page granularity
2011-03-23 19:46:30 -07:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6
2011-03-16 16:29:25 -07:00
sigma-firmware: loader for Analog Devices' SigmaStudio
2011-03-22 17:44:15 -07:00
net: introduce rx_handler results and logic around that
2011-03-16 12:53:54 -07:00
slub: Add statistics for this_cmpxchg_double failures
2011-03-22 20:48:04 +02:00
smp: add missing init.h include
2011-03-23 07:48:42 -07:00
tcp: ioctl type SIOCOUTQNSD returns amount of data not sent
2011-03-09 14:08:09 -08:00
PM: Drop pm_flags that is not necessary
2011-03-15 00:43:16 +01:00
mm: vmscan: kswapd should not free an excessive number of pages when balancing small zones
2011-03-22 17:44:04 -07:00
introduce sys_syncfs to sync a single file system
2011-03-21 00:40:29 -04:00
PM / Core: Introduce struct syscore_ops for core subsystems PM
2011-03-15 00:43:46 +01:00
sysctl: the include of rcupdate.h is only needed in the kernel
2011-03-09 16:43:24 -08:00
ACPI: Fix build for CONFIG_NET unset
2011-02-28 18:00:31 -08:00
timers: Add CLOCK_BOOTTIME hrtimer base
2011-02-21 12:53:08 -08:00
tipc: Clean out all remaining instances of #if 0'd unused code
2011-02-23 18:05:11 -05:00
tipc: Correct misnamed references to neighbor discovery domain
2011-03-13 16:35:18 -04:00
tty: stop using "delayed_work" in the tty layer
2011-03-22 16:17:32 -07:00
tty: now phase out the ioctl file pointer for good
2011-02-17 11:59:56 -08:00
add the common dma_addr_t typedef to include/linux/types.h
2011-03-22 17:44:09 -07:00
userns: add a user_namespace as creator/owner of uts_namespace
2011-03-23 19:46:59 -07:00
mm: add __GFP_OTHER_NODE flag
2011-03-22 17:44:05 -07:00
tty,vcs removing con_buf/conf_buf_mtx
2011-02-17 11:13:19 -08:00
workqueue: fix build failure introduced by s/freezeable/freezable/
2011-02-21 10:07:23 +01:00
xfrm: Add basic infrastructure to support IPsec extended sequence numbers
2011-03-13 20:22:28 -07:00
zlib: slim down zlib_deflate() workspace when possible
2011-03-22 17:44:17 -07:00
