Re: [PATCH v2] tty: Allow stealing of controlling ttys within user namespaces

2014-02-07 Thread Greg Kroah-Hartman
On Fri, Jan 24, 2014 at 03:31:15PM -0800, Eric W. Biederman wrote: > Seth Forshee writes: > > > root is allowed to steal ttys from other sessions, but it > > requires system-wide CAP_SYS_ADMIN and therefore is not possible > > for root within a user namespace. This should be allowed so long > >

Re: [PATCH v2] tty: Allow stealing of controlling ttys within user namespaces

2014-02-07 Thread Greg Kroah-Hartman
On Fri, Jan 24, 2014 at 03:31:15PM -0800, Eric W. Biederman wrote: Seth Forshee seth.fors...@canonical.com writes: root is allowed to steal ttys from other sessions, but it requires system-wide CAP_SYS_ADMIN and therefore is not possible for root within a user namespace. This should be

Re: [PATCH v2] tty: Allow stealing of controlling ttys within user namespaces

2014-01-24 Thread Eric W. Biederman
Seth Forshee writes: > root is allowed to steal ttys from other sessions, but it > requires system-wide CAP_SYS_ADMIN and therefore is not possible > for root within a user namespace. This should be allowed so long > as the process doing the stealing is privileged towards the > session which

Re: [PATCH v2] tty: Allow stealing of controlling ttys within user namespaces

2014-01-24 Thread Eric W. Biederman
Seth Forshee seth.fors...@canonical.com writes: root is allowed to steal ttys from other sessions, but it requires system-wide CAP_SYS_ADMIN and therefore is not possible for root within a user namespace. This should be allowed so long as the process doing the stealing is privileged towards

[PATCH v2] tty: Allow stealing of controlling ttys within user namespaces

2014-01-22 Thread Seth Forshee
root is allowed to steal ttys from other sessions, but it requires system-wide CAP_SYS_ADMIN and therefore is not possible for root within a user namespace. This should be allowed so long as the process doing the stealing is privileged towards the session which currently owns the tty. Update this

[PATCH v2] tty: Allow stealing of controlling ttys within user namespaces

2014-01-22 Thread Seth Forshee
root is allowed to steal ttys from other sessions, but it requires system-wide CAP_SYS_ADMIN and therefore is not possible for root within a user namespace. This should be allowed so long as the process doing the stealing is privileged towards the session which currently owns the tty. Update this