af_unix: Allow SO_PEERCRED to work across namespaces.

Browse source

Use struct pid and struct cred to store the peer credentials on struct
sock.  This gives enough information to convert the peer credential
information to a value relative to whatever namespace the socket is in
at the time.

This removes nasty surprises when using SO_PEERCRED on socket
connetions where the processes on either side are in different pid and
user namespaces.

Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
Acked-by: Daniel Lezcano <daniel.lezcano@free.fr>
Acked-by: Pavel Emelyanov <xemul@openvz.org>
Signed-off-by: David S. Miller <davem@davemloft.net>

...

This commit is contained in:

Eric W. Biederman 2010-06-13 03:30:14 +00:00 • committed by David S. Miller

parent 3f551f9436

commit 109f6e39fa

3 changed files with 42 additions and 16 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

3

include/net/sock.h

View file

18

net/core/sock.c

View file

37

net/unix/af_unix.c

View file