keys: play nicely with user namespaces
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest3 patches 18 repliesIn review
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/3 | keys: distinguish per-uid keys in different namespaceskernel/ security/ security/ +3 more | +17 | 0 replies | |
| 2/3 | keys: consider user namespace in key_permissionsecurity/ | +5 | 0 replies | |
| 3/3 | keys: skip keys from another user namespacesecurity/ | +3 | 0 replies |
Reviews trailers per patch
No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.
Cover letter [PATCH 0/3] keys: play nicely with user namespaces
Hi David,
so here is a first attempt at getting keys and uid namespaces to play nice. The semantics need some discussion. As I recall Eric and yourself appeared to agree that some keyrings should be inherited into child user namespaces. I segragate them cleanly bc that appears to be the simplest thing to do especially given the use of i.e. lookup_by_name("uid.500"). IMO it shouldn't be a big problem - userspace can always list keys it wants into a file, start a new user namespace, then re-read them out of the tempfile...
Comments appreciated.
thanks,
-serge