Re: [REVIEW][PATCH] mm: Add a user_ns owner to mm_struct and fix ptrace_may_access

2016-10-18 Thread Eric W. Biederman
Jann Horn writes: > On Tue, Oct 18, 2016 at 10:35:23AM -0500, Eric W. Biederman wrote: >> Jann Horn writes: >> >> > On Tue, Oct 18, 2016 at 09:56:53AM -0500, Eric W. Biederman wrote: >> >> Michal Hocko writes: >> >> >> >> > On Mon 17-10-16 11:39:49, Eric W. Biederman wrote: >> >> >> >> >> >>

Re: [REVIEW][PATCH] mm: Add a user_ns owner to mm_struct and fix ptrace_may_access

2016-10-18 Thread Jann Horn
On Tue, Oct 18, 2016 at 10:35:23AM -0500, Eric W. Biederman wrote: > Jann Horn writes: > > > On Tue, Oct 18, 2016 at 09:56:53AM -0500, Eric W. Biederman wrote: > >> Michal Hocko writes: > >> > >> > On Mon 17-10-16 11:39:49, Eric W. Biederman wrote: > >> >> > >> >> During exec dumpable is clear

Re: [REVIEW][PATCH] mm: Add a user_ns owner to mm_struct and fix ptrace_may_access

2016-10-18 Thread Michal Hocko
On Tue 18-10-16 09:56:53, Eric W. Biederman wrote: > Michal Hocko writes: > > > On Mon 17-10-16 11:39:49, Eric W. Biederman wrote: > >> > >> During exec dumpable is cleared if the file that is being executed is > >> not readable by the user executing the file. A bug in > >> ptrace_may_access al

Re: [REVIEW][PATCH] mm: Add a user_ns owner to mm_struct and fix ptrace_may_access

2016-10-18 Thread Eric W. Biederman
Jann Horn writes: > On Tue, Oct 18, 2016 at 09:56:53AM -0500, Eric W. Biederman wrote: >> Michal Hocko writes: >> >> > On Mon 17-10-16 11:39:49, Eric W. Biederman wrote: >> >> >> >> During exec dumpable is cleared if the file that is being executed is >> >> not readable by the user executing t

Re: [REVIEW][PATCH] mm: Add a user_ns owner to mm_struct and fix ptrace_may_access

2016-10-18 Thread Jann Horn
On Tue, Oct 18, 2016 at 09:56:53AM -0500, Eric W. Biederman wrote: > Michal Hocko writes: > > > On Mon 17-10-16 11:39:49, Eric W. Biederman wrote: > >> > >> During exec dumpable is cleared if the file that is being executed is > >> not readable by the user executing the file. A bug in > >> ptra

Re: [REVIEW][PATCH] mm: Add a user_ns owner to mm_struct and fix ptrace_may_access

2016-10-18 Thread Eric W. Biederman
Michal Hocko writes: > On Mon 17-10-16 11:39:49, Eric W. Biederman wrote: >> >> During exec dumpable is cleared if the file that is being executed is >> not readable by the user executing the file. A bug in >> ptrace_may_access allows reading the file if the executable happens to >> enter into

Re: [REVIEW][PATCH] mm: Add a user_ns owner to mm_struct and fix ptrace_may_access

2016-10-18 Thread Jann Horn
On Tue, Oct 18, 2016 at 03:50:32PM +0200, Michal Hocko wrote: > On Mon 17-10-16 11:39:49, Eric W. Biederman wrote: > > > > During exec dumpable is cleared if the file that is being executed is > > not readable by the user executing the file. A bug in > > ptrace_may_access allows reading the file

Re: [REVIEW][PATCH] mm: Add a user_ns owner to mm_struct and fix ptrace_may_access

2016-10-18 Thread Michal Hocko
On Mon 17-10-16 11:39:49, Eric W. Biederman wrote: > > During exec dumpable is cleared if the file that is being executed is > not readable by the user executing the file. A bug in > ptrace_may_access allows reading the file if the executable happens to > enter into a subordinate user namespace (

Re: [REVIEW][PATCH] mm: Add a user_ns owner to mm_struct and fix ptrace_may_access

2016-10-17 Thread Eric W. Biederman
Jann Horn writes: > On Mon, Oct 17, 2016 at 11:39:49AM -0500, Eric W. Biederman wrote: >> >> During exec dumpable is cleared if the file that is being executed is >> not readable by the user executing the file. A bug in >> ptrace_may_access allows reading the file if the executable happens to >

Re: [REVIEW][PATCH] mm: Add a user_ns owner to mm_struct and fix ptrace_may_access

2016-10-17 Thread Jann Horn
On Mon, Oct 17, 2016 at 11:39:49AM -0500, Eric W. Biederman wrote: > > During exec dumpable is cleared if the file that is being executed is > not readable by the user executing the file. A bug in > ptrace_may_access allows reading the file if the executable happens to > enter into a subordinate