]> git.proxmox.com Git - mirror_ubuntu-zesty-kernel.git/search
projects / mirror_ubuntu-zesty-kernel.git / search
? search:
summary | shortlog | log | commit | commitdiff | tree
first ⋅ prev ⋅ next
evm: Translate user/group ids relative to s_user_ns when computing HMAC
2016-07-05 Seth Forsheeevm: Translate user/group ids relative to s_user_ns...
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-07-05 Eric W. Biedermandquot: For now explicitly don't support filesystems...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-07-05 Eric W. Biedermanquota: Handle quota data stored in s_user_ns in quota_setxquota
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-07-05 Eric W. Biedermanquota: Ensure qids map to the filesystem
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-07-05 Eric W. Biedermanvfs: Don't create inodes with a uid or gid unknown...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-07-05 Eric W. Biedermanvfs: Don't modify inodes with a uid or gid unknown...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-06-30 Seth Forsheecred: Reject inodes with invalid ids in set_create_file_as()
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-06-30 Seth Forsheefs: Check for invalid i_uid in may_follow_link()
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-06-30 Eric W. Biedermanvfs: Verify acls are valid within superblock's s_user_ns.
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-06-30 Eric W. Biedermanuserns: Handle -1 in k[ug]id_has_mapping when !CONFIG_USER_NS
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-06-28 Seth Forsheefs: Refuse uid/gid changes which don't map into s_user_ns
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-06-24 Seth Forsheeselinux: Add support for unprivileged mounts from user...
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-06-24 Seth ForsheeSmack: Handle labels consistently in untrusted mounts
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-06-24 Seth ForsheeSmack: Add support for unprivileged mounts from user...
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-06-24 Andy Lutomirskifs: Treat foreign mounts as nosuid
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-06-24 Seth Forsheefs: Limit file caps to the user namespace of the super...
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-06-23 Eric W. Biedermanuserns: Remove the now unnecessary FS_USERNS_DEV_MOUNT...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-06-23 Eric W. Biedermanuserns: Remove implicit MNT_NODEV fragility.
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-06-23 Eric W. Biedermanmnt: Simplify mount_too_revealing
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-06-23 Eric W. Biedermanvfs: Generalize filesystem nodev handling.
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-06-23 Eric W. Biedermanipc/mqueue: The mqueue filesystem should never contain...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-06-23 Eric W. Biedermankernfs: The cgroup filesystem also benefits from SB_I_NOEXEC
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-06-23 Eric W. Biedermanmnt: Move the FS_USERNS_MOUNT check into sget_userns
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-06-23 Eric W. Biedermanfs: Add user namespace member to struct super_block
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-06-23 Eric W. Biedermanproc: Convert proc_mount to use mount_ns.
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-06-23 Eric W. Biedermanvfs: Pass data, ns, and ns->userns to mount_ns
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-06-23 Eric W. Biedermanipc: Initialize ipc_namespace->user_ns early.
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-06-23 Eric W. Biedermanmnt: Refactor fs_fully_visible into mount_too_revealing
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-06-15 Eric W. Biedermanmnt: Account for MS_RDONLY in fs_fully_visible
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-06-07 Eric W. Biedermanmnt: fs_fully_visible test the proper mount for MNT_LOCKED
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-06-07 Eric W. Biedermanmnt: If fs_fully_visible fails call put_filesystem.
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2016-05-05 Eric W. Biedermanpropogate_mnt: Handle the first propogated copy being...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-10-27 Dirk Steinmetznamei: permit linking with CAP_FOWNER in userns
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-10-01 Eric W. Biedermanipv6: Add missing newline to __xfrm6_output_finish
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-09-30 Eric W. Biedermanopenvswitch: Remove ovs_vport_output_sk
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-09-30 Eric W. Biedermanbridge: Remove br_nf_push_frag_xmit_sk
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-09-30 Eric W. Biedermanipv6: Pass struct net through ip6_fragment
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-09-30 Eric W. Biedermanipv4: Pass struct net through ip_fragment
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-09-30 Eric W. Biedermanopenvswitch: Pass net into ovs_fragment
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-09-30 Eric W. Biedermanopenvswitch: Pass net into ovs_vport_output
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-08-12 Eric W. Biedermanfs: Set the size of empty dirs to 0.
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-08-12 Eric W. Biedermanuserns,pidns: Force thread group sharing, not signal...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-08-12 Eric W. Biedermanunshare: Unsharing a thread does not require unsharing...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-07-23 Eric W. Biedermanmnt: In detach_mounts detach the appropriate unmounted...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-07-23 Eric W. Biedermanmnt: Clarify and correct the disconnect logic in umount_tree
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-07-11 Eric W. Biedermannsfs: Add a show_path method to fix mountinfo
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-07-10 Eric W. Biedermanmnt: fs_fully_visible enforce noexec and nosuid if...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-07-10 Eric W. Biedermanvfs: Commit to never having exectuables on proc and...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-07-01 Eric W. Biedermanvfs: Remove incorrect debugging WARN in prepend_path
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-07-01 Eric W. Biedermanmnt: Update fs_fully_visible to test for permanently...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-07-01 Eric W. Biedermansysfs: Create mountpoints with sysfs_create_mount_point
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-07-01 Eric W. Biedermansysfs: Add support for permanently empty directories...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-07-01 Eric W. Biedermankernfs: Add support for always empty directories.
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-07-01 Eric W. Biedermanproc: Allow creating permanently empty directories...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-07-01 Eric W. Biedermansysctl: Allow creating permanently empty directories...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-07-01 Eric W. Biedermanfs: Add helper functions for permanently empty directories.
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-07-01 Eric W. Biedermanvfs: Ignore unlocked mounts in fs_fully_visible
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-06-04 Eric W. Biedermanmnt: Modify fs_fully_visible to deal with locked ro...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-05-14 Eric W. Biedermanmnt: Refactor the logic for mounting sysfs and proc...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-05-09 Eric W. Biedermanmnt: Fix fs_fully_visible to verify the root directory...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-04-09 Eric W. Biedermanmnt: Update detach_mounts to leave mounts connected
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-04-09 Eric W. Biedermanmnt: Fix the error check in __detach_mounts
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-04-09 Eric W. Biedermanmnt: Honor MNT_LOCKED when detaching mounts
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-04-09 Eric W. Biedermanfs_pin: Allow for the possibility that m_list or s_list...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-04-09 Eric W. Biedermanmnt: Factor umount_mnt from umount_tree
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-04-09 Eric W. Biedermanmnt: Factor out unhash_mnt from detach_mnt and umount_tree
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-04-09 Eric W. Biedermanmnt: Fail collect_mounts when applied to unmounted...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-04-03 Eric W. Biedermanmnt: Don't propagate unmounts to locked mounts
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-04-03 Eric W. Biedermanmnt: On an unmount propagate clearing of MNT_LOCKED
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-04-03 Eric W. Biedermanmnt: Delay removal from the mount hash.
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-04-03 Eric W. Biedermanmnt: Add MNT_UMOUNT flag
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-04-03 Eric W. Biedermanmnt: In umount_tree reuse mnt_list instead of mnt_hash
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-04-03 Eric W. Biedermanmnt: Don't propagate umounts in __detach_mounts
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-04-03 Eric W. Biedermanmnt: Improve the umount_tree flags
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2015-04-03 Eric W. Biedermanmnt: Use hlist_move_list in namespace_unlock
Signed-off-by: Eric Biederman <ebiederm@xmission.com>
 commit | commitdiff | tree
2014-12-12 Eric W. Biedermanuserns: Unbreak the unprivileged remount tests
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2014-12-12 Eric W. Biedermanuserns; Correct the comment in map_write
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2014-12-12 Eric W. Biedermanuserns: Allow setting gid_maps without privilege when...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2014-12-12 Eric W. Biedermanuserns: Add a knob to disable setgroups on a per user...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2014-12-09 Eric W. Biedermanuserns: Rename id_map_mutex to userns_state_mutex
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2014-12-09 Eric W. Biedermanuserns: Only allow the creator of the userns unprivileged...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2014-12-09 Eric W. Biedermanuserns: Check euid no fsuid when establishing an unprivilege...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2014-12-09 Eric W. Biedermanuserns: Don't allow unprivileged creation of gid mappings
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2014-12-09 Eric W. Biedermanuserns: Don't allow setgroups until a gid mapping has...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2014-12-06 Eric W. Biedermanuserns: Document what the invariant required for safe...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2014-12-05 Eric W. Biedermangroups: Consolidate the setgroups permission checks
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2014-12-02 Eric W. Biedermanmnt: Clear mnt_expire during pivot_root
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2014-12-02 Eric W. Biedermanmnt: Carefully set CL_UNPRIVILEGED in clone_mnt
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2014-12-02 Eric W. Biedermanmnt: Move the clear of MNT_LOCKED from copy_tree to...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2014-12-02 Eric W. Biedermanumount: Do not allow unmounting rootfs.
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2014-12-02 Eric W. Biedermanumount: Disallow unprivileged mount force
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2014-12-02 Eric W. Biedermanmnt: Update unprivileged remount test
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
 commit | commitdiff | tree
2014-12-02 Eric W. Biedermanmnt: Implicitly add MNT_NODEV on remount when it was...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2014-08-04 Eric W. Biedermanproc: Point /proc/mounts at /proc/thread-self/mounts...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2014-08-04 Eric W. Biedermanproc: Point /proc/net at /proc/thread-self/net instead...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2014-08-04 Eric W. Biedermanproc: Implement /proc/thread-self to point at the directory...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2014-08-04 Eric W. Biedermanproc: Have net show up under /proc/<tgid>/task/<tid>
 ...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2014-08-04 Eric W. BiedermanNFS: Fix /proc/fs/nfsfs/servers and /proc/fs/nfsfs...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2014-08-01 Eric W. Biedermanmnt: Add tests for unprivileged remount cases that...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
2014-08-01 Eric W. Biedermanmnt: Change the default remount atime from relatime...
...off-by: "Eric W. Biederman" <ebiederm@xmission.com>
 commit | commitdiff | tree
next
ubuntu-zesty-kernel mirror