]> git.proxmox.com Git - mirror_ubuntu-zesty-kernel.git/commit
projects / mirror_ubuntu-zesty-kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 50804fe) | patch
vfs: Allow chroot if you have CAP_SYS_CHROOT in your user namespace
authorEric W. Biederman <ebiederm@xmission.com>
Tue, 31 Jul 2012 08:14:12 +0000 (01:14 -0700)
committerEric W. Biederman <ebiederm@xmission.com>
Mon, 19 Nov 2012 13:59:17 +0000 (05:59 -0800)
commita85fb273c94648cbf20a5f9bcf8bbbb075f271ad
treebdfe3d662dd4a42673620067f21c7b6fedd04d27tree
parent50804fe3737ca6a5942fdc2057a18a8141d00141commit | diff
vfs: Allow chroot if you have CAP_SYS_CHROOT in your user namespace

Once you are confined to a user namespace applications can not gain
privilege and escape the user namespace so there is no longer a reason
to restrict chroot.

Acked-by: Serge Hallyn <serge.hallyn@canonical.com>
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
fs/open.c diff | blob | blame | history
ubuntu-zesty-kernel mirror