userns: Add per user namespace sysctls.

Browse source

Limit per userns sysctls to only be opened for write by a holder
of CAP_SYS_RESOURCE.

Add all of the necessary boilerplate for having per user namespace
sysctls.

Acked-by: Kees Cook <keescook@chromium.org>
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>

...

This commit is contained in:

Eric W. Biederman 2016-07-30 13:58:49 -05:00

parent b032132c3c

commit dbec28460a

4 changed files with 120 additions and 3 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

4

include/linux/user_namespace.h

View file

2

kernel/Makefile

View file

99

kernel/ucount.c

View file

18

kernel/user_namespace.c

View file