Re: [PATCH 2/2] nsfs: Add an ioctl() to return creator UID of a userns

2016-12-21 Thread Eric W. Biederman
Andrei Vagin writes: > On Mon, Dec 19, 2016 at 03:38:35PM +0100, Michael Kerrisk (man-pages) wrote: >> @@ -174,6 +175,11 @@ static long ns_ioctl(struct file *filp, unsigned int >> ioctl, >> return open_related_ns(ns, ns->ops->get_parent); >> case NS_GET_NSTYPE: >>

Re: [PATCH 2/2] nsfs: Add an ioctl() to return creator UID of a userns

2016-12-21 Thread Michael Kerrisk (man-pages)
Hi Andrei, On 12/21/2016 04:13 AM, Andrei Vagin wrote: > On Mon, Dec 19, 2016 at 03:38:35PM +0100, Michael Kerrisk (man-pages) wrote: >> # Some open questions about this patch below. >> # >> One of the rules regarding capabilities is: >> >> A process that resides in the parent of the user name

Re: [PATCH 2/2] nsfs: Add an ioctl() to return creator UID of a userns

2016-12-20 Thread Andrei Vagin
On Mon, Dec 19, 2016 at 03:38:35PM +0100, Michael Kerrisk (man-pages) wrote: > # Some open questions about this patch below. > # > One of the rules regarding capabilities is: > > A process that resides in the parent of the user namespace and > whose effective user ID matches the owner of t

[PATCH 2/2] nsfs: Add an ioctl() to return creator UID of a userns

2016-12-19 Thread Michael Kerrisk (man-pages)
# Some open questions about this patch below. # One of the rules regarding capabilities is: A process that resides in the parent of the user namespace and whose effective user ID matches the owner of the namespace has all capabilities in the namespace. Therefore, in order to write cod