summaryrefslogtreecommitdiffstats
path: root/net
diff options
context:
space:
mode:
authorEric W. Biederman <ebiederm@xmission.com>2012-07-31 13:13:04 -0700
committerEric W. Biederman <ebiederm@xmission.com>2012-11-19 05:59:20 -0800
commit7a472ef4be8387bc05a42e16309b02c8ca943a40 (patch)
treed08fef7f89da670c24116805dbe1bcf60e094497 /net
parent771b1371686e0a63e938ada28de020b9a0040f55 (diff)
downloadlinux-stable-7a472ef4be8387bc05a42e16309b02c8ca943a40.tar.gz
linux-stable-7a472ef4be8387bc05a42e16309b02c8ca943a40.tar.bz2
linux-stable-7a472ef4be8387bc05a42e16309b02c8ca943a40.zip
vfs: Only support slave subtrees across different user namespaces
Sharing mount subtress with mount namespaces created by unprivileged users allows unprivileged mounts created by unprivileged users to propagate to mount namespaces controlled by privileged users. Prevent nasty consequences by changing shared subtrees to slave subtress when an unprivileged users creates a new mount namespace. Acked-by: Serge Hallyn <serge.hallyn@canonical.com> Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
Diffstat (limited to 'net')
0 files changed, 0 insertions, 0 deletions