diff options
author | Eric W. Biederman <ebiederm@xmission.com> | 2011-06-18 17:48:18 -0700 |
---|---|---|
committer | Eric W. Biederman <ebiederm@xmission.com> | 2012-11-20 04:19:48 -0800 |
commit | bf056bfa80596a5d14b26b17276a56a0dcb080e5 (patch) | |
tree | 116db3255e1b75a92b30b72afe416aa941109e9f /security | |
parent | 33d6dce607573b5fd7a43168e0d91221b3ca532b (diff) | |
download | op-kernel-dev-bf056bfa80596a5d14b26b17276a56a0dcb080e5.zip op-kernel-dev-bf056bfa80596a5d14b26b17276a56a0dcb080e5.tar.gz |
proc: Fix the namespace inode permission checks.
Change the proc namespace files into symlinks so that
we won't cache the dentries for the namespace files
which can bypass the ptrace_may_access checks.
To support the symlinks create an additional namespace
inode with it's own set of operations distinct from the
proc pid inode and dentry methods as those no longer
make sense.
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
Diffstat (limited to 'security')
0 files changed, 0 insertions, 0 deletions