Re: [CFT][PATCH 1/3] userns: Avoid problems with negative groups

2014-12-02 Thread Andy Lutomirski
On Tue, Dec 2, 2014 at 2:48 PM, Eric W. Biederman wrote: > Andy Lutomirski writes: > >> On Tue, Dec 2, 2014 at 1:26 PM, Eric W. Biederman >> wrote: >>> Andy Lutomirski writes: >>> On Tue, Dec 2, 2014 at 12:25 PM, Eric W. Biederman wrote: > > Classic unix permission checks

Re: [CFT][PATCH 1/3] userns: Avoid problems with negative groups

2014-12-02 Thread Eric W. Biederman
Andy Lutomirski writes: > On Tue, Dec 2, 2014 at 1:26 PM, Eric W. Biederman > wrote: >> Andy Lutomirski writes: >> >>> On Tue, Dec 2, 2014 at 12:25 PM, Eric W. Biederman >>> wrote: Classic unix permission checks have an interesting feature, the group permissions for a file can

Re: [CFT][PATCH 1/3] userns: Avoid problems with negative groups

2014-12-02 Thread Andy Lutomirski
On Tue, Dec 2, 2014 at 1:26 PM, Eric W. Biederman wrote: > Andy Lutomirski writes: > >> On Tue, Dec 2, 2014 at 12:25 PM, Eric W. Biederman >> wrote: >>> >>> Classic unix permission checks have an interesting feature, the group >>> permissions for a file can be set to less than the other

Re: [CFT][PATCH 1/3] userns: Avoid problems with negative groups

2014-12-02 Thread Eric W. Biederman
Andy Lutomirski writes: > On Tue, Dec 2, 2014 at 12:25 PM, Eric W. Biederman > wrote: >> >> Classic unix permission checks have an interesting feature, the group >> permissions for a file can be set to less than the other permissions >> on a file. Occassionally this is used deliberately to

Re: [CFT][PATCH 1/3] userns: Avoid problems with negative groups

2014-12-02 Thread Andy Lutomirski
On Tue, Dec 2, 2014 at 12:25 PM, Eric W. Biederman wrote: > > Classic unix permission checks have an interesting feature, the group > permissions for a file can be set to less than the other permissions > on a file. Occassionally this is used deliberately to give a certain > group of users fewer

[CFT][PATCH 1/3] userns: Avoid problems with negative groups

2014-12-02 Thread Eric W. Biederman
Classic unix permission checks have an interesting feature, the group permissions for a file can be set to less than the other permissions on a file. Occassionally this is used deliberately to give a certain group of users fewer permissions than the default. Overlooking negative groups has

[CFT][PATCH 1/3] userns: Avoid problems with negative groups

2014-12-02 Thread Eric W. Biederman
Classic unix permission checks have an interesting feature, the group permissions for a file can be set to less than the other permissions on a file. Occassionally this is used deliberately to give a certain group of users fewer permissions than the default. Overlooking negative groups has

Re: [CFT][PATCH 1/3] userns: Avoid problems with negative groups

2014-12-02 Thread Andy Lutomirski
On Tue, Dec 2, 2014 at 12:25 PM, Eric W. Biederman ebied...@xmission.com wrote: Classic unix permission checks have an interesting feature, the group permissions for a file can be set to less than the other permissions on a file. Occassionally this is used deliberately to give a certain

Re: [CFT][PATCH 1/3] userns: Avoid problems with negative groups

2014-12-02 Thread Eric W. Biederman
Andy Lutomirski l...@amacapital.net writes: On Tue, Dec 2, 2014 at 12:25 PM, Eric W. Biederman ebied...@xmission.com wrote: Classic unix permission checks have an interesting feature, the group permissions for a file can be set to less than the other permissions on a file. Occassionally

Re: [CFT][PATCH 1/3] userns: Avoid problems with negative groups

2014-12-02 Thread Andy Lutomirski
On Tue, Dec 2, 2014 at 1:26 PM, Eric W. Biederman ebied...@xmission.com wrote: Andy Lutomirski l...@amacapital.net writes: On Tue, Dec 2, 2014 at 12:25 PM, Eric W. Biederman ebied...@xmission.com wrote: Classic unix permission checks have an interesting feature, the group permissions for a

Re: [CFT][PATCH 1/3] userns: Avoid problems with negative groups

2014-12-02 Thread Eric W. Biederman
Andy Lutomirski l...@amacapital.net writes: On Tue, Dec 2, 2014 at 1:26 PM, Eric W. Biederman ebied...@xmission.com wrote: Andy Lutomirski l...@amacapital.net writes: On Tue, Dec 2, 2014 at 12:25 PM, Eric W. Biederman ebied...@xmission.com wrote: Classic unix permission checks have an

Re: [CFT][PATCH 1/3] userns: Avoid problems with negative groups

2014-12-02 Thread Andy Lutomirski
On Tue, Dec 2, 2014 at 2:48 PM, Eric W. Biederman ebied...@xmission.com wrote: Andy Lutomirski l...@amacapital.net writes: On Tue, Dec 2, 2014 at 1:26 PM, Eric W. Biederman ebied...@xmission.com wrote: Andy Lutomirski l...@amacapital.net writes: On Tue, Dec 2, 2014 at 12:25 PM, Eric W.