RE: [PATCH] [RFC] Limit dump_pipe program's permission to init for container

2016-07-12 Thread Zhao Lei
Biederman > Subject: Re: [PATCH] [RFC] Limit dump_pipe program's permission to init for > container > > On Fri, Jul 08, 2016 at 07:08:10PM +0800, Zhao Lei wrote: > > Currently when we set core_pattern to a pipe, the pipe program is > > forked by kthread running with roo

Re: [PATCH] [RFC] Limit dump_pipe program's permission to init for container

2016-07-08 Thread Stéphane Graber
On Fri, Jul 08, 2016 at 07:08:10PM +0800, Zhao Lei wrote: > Currently when we set core_pattern to a pipe, the pipe program is > forked by kthread running with root's permission, and write dumpfile > into host's filesystem. > Same thing happened for container, the dumper and dumpfile are also > in h