Skip to content

A couple of lingering namespace patches

Eric W. Biederman containers lkml 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest5 patches 8 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/5namespaces: Simplify copy_namespaces so it is clear what is going on.kernel/nsproxy.c+11 -241 reply
2/5userns: Allow PR_CAPBSET_DROP in a user namespace.security/commoncap.c+1 -11 reply
3/5pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREADkernel/fork.c+0 -54 replies
4/5capabilities: allow nice if we are privilegedsecurity/commoncap.c+4 -40 replies
5/5userns: Kill nsown_capable it makes the wrong thing easyfs/namespace.c fs/open.c include/linux/capability.h +9 more+21 -342 replies

Reviews trailers per patch

All 5 patches have a Reviewed-by or Acked-by.

PatchRichard WeinbergerEric W. BiedermanSerge Hallyn
1/5A-b
2/5T-b A-b
3/5A-b
4/5R-b
5/5A-b A-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 3 reviewers.

Read the v1 thread

Cover letter [REVIEW][PATCH 0/5] A couple of lingering namespace patches

There are a couple of long overdue namespace patches, simple cleanups and permision grants that have been sitting in my development tree for far too long. If anyone objects to these please let me know.

Eric W. Biederman (4):
namespaces: Simplify copy_namespaces so it is clear what is going on.
userns: Allow PR_CAPBSET_DROP in a user namespace.
pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD
userns: Kill nsown_capable it makes the wrong thing easy

Serge Hallyn (1):
capabilities: allow nice if we are privileged

 fs/namespace.c             |    4 ++--
 fs/open.c                  |    2 +-
 include/linux/capability.h |    1 -
 ipc/namespace.c            |    2 +-
 kernel/capability.c        |   12 ------------
 kernel/fork.c              |    5 -----
 kernel/groups.c            |    2 +-
 kernel/nsproxy.c           |   35 +++++++++++------------------------
 kernel/pid_namespace.c     |    2 +-
 kernel/sys.c               |   20 ++++++++++----------
 kernel/uid16.c             |    2 +-
 kernel/utsname.c           |    2 +-
 net/core/net_namespace.c   |    2 +-
 net/core/scm.c             |    4 ++--
 security/commoncap.c       |   10 +++++-----
 15 files changed, 37 insertions(+), 68 deletions(-)

Eric