Re: [PATCH 2/2] user_namespaces.7: Update the documention to reflect the fixes for negative groups

On 02/02/2015 10:31 PM, Alban Crequy wrote: > Hello, > > Thanks for updating the man page. > > On 12 December 2014 at 22:54, Eric W. Biederman wrote: > (...) >> Furthermore to preserve in some form the useful applications that have >> been setting gid_map without privilege the file /proc/[pid]/s

Re: [PATCH 1/2] proc.5: Document /proc/[pid]/setgroups

Hi Eric Ping^2! Cheers, Michael On 12 February 2015 at 14:53, Michael Kerrisk (man-pages) wrote: > Hello Eric, > > On 02/11/2015 02:51 PM, Eric W. Biederman wrote: >> "Michael Kerrisk (man-pages)" writes: >> >>> Hi Eric, >>> >>> Ping

Re: [PATCH 1/2] proc.5: Document /proc/[pid]/setgroups

Hi Eric, Ping! Cheers, Michael On 02/12/2015 02:53 PM, Michael Kerrisk (man-pages) wrote: > Hello Eric, > > On 02/11/2015 02:51 PM, Eric W. Biederman wrote: >> "Michael Kerrisk (man-pages)" writes: >> >>> Hi Eric, >>> >>> Ping

Re: [PATCH 1/2] proc.5: Document /proc/[pid]/setgroups

Hello Eric, On 02/11/2015 02:51 PM, Eric W. Biederman wrote: > "Michael Kerrisk (man-pages)" writes: > >> Hi Eric, >> >> Ping! >> >> Cheers, >> >> Michael > > My apologies. You description wasn't wrong but it may be a bit

Re: [PATCH 2/2] user_namespaces.7: Update the documention to reflect the fixes for negative groups

On 02/11/2015 03:01 PM, Eric W. Biederman wrote: > "Michael Kerrisk (man-pages)" writes: > >> Hi Eric, >> >> Ping! >> >> Cheers, >> >> Michael >> >> >> On 2 February 2015 at 16:37, Michael Kerrisk (man-pages) >> w

Re: [PATCH 2/2] user_namespaces.7: Update the documention to reflect the fixes for negative groups

Hi Eric, Ping! Cheers, Michael On 2 February 2015 at 16:37, Michael Kerrisk (man-pages) wrote: > Hi Eric, > > Thanks for writing this up! > > On 12/12/2014 10:54 PM, Eric W. Biederman wrote: >> >> Files with access permissions such as ---rwx---rwx give fewer &g

Re: [PATCH 1/2] proc.5: Document /proc/[pid]/setgroups

Hi Eric, Ping! Cheers, Michael On 2 February 2015 at 16:36, Michael Kerrisk (man-pages) wrote: > [Adding Josh to CC in case he has anything to add.] > > On 12/12/2014 10:54 PM, Eric W. Biederman wrote: >> >> Signed-off-by: Eric W. Biederman >> --- >> man5/

Re: [PATCH 1/2] proc.5: Document /proc/[pid]/setgroups

[Adding Josh to CC in case he has anything to add.] On 12/12/2014 10:54 PM, Eric W. Biederman wrote: > > Signed-off-by: Eric W. Biederman > --- > man5/proc.5 | 15 +++ > 1 file changed, 15 insertions(+) > > diff --git a/man5/proc.5 b/man5/proc.5 > index 96077d0dd195..d661e8cfeac9 1

Re: [PATCH 2/2] user_namespaces.7: Update the documention to reflect the fixes for negative groups

Hi Eric, Thanks for writing this up! On 12/12/2014 10:54 PM, Eric W. Biederman wrote: > > Files with access permissions such as ---rwx---rwx give fewer > permissions to their group then they do to everyone else. Which means > dropping groups with setgroups(0, NULL) actually grants a process > p

Re: [PATCH] fanotify: add a flag to allow setting O_CLOEXEC on event fd

On Thu, Oct 2, 2014 at 11:13 AM, Pádraig Brady wrote: > On 10/02/2014 08:52 AM, Yann Droneaud wrote: >> In order to not potentially break applications which were >> requesting O_CLOEXEC on event file descriptors but which >> actually need it to be not effective as the kernel currently >> ignore th

[PATCH RESEND] ipc: Fix 2 bugs in msgrcv() MSG_COPY implementation

From: Michael Kerrisk [Bother: messed up the email address for stable on my mail of a 5 minutes ago. Resending, again.] While testing and documenting the msgrcv() MSG_COPY flag that Stanislav Kinsbursky added in commit 4a674f34ba04a002244edaf891b5da7fc1473ae8 (==> kernel 3.8), I discovered a

[PATCH] ipc: Fix 2 bugs in msgrcv() MSG_COPY implementation

From: Michael Kerrisk While testing and documenting the msgrcv() MSG_COPY flag that Stanislav Kinsbursky added in commit 4a674f34ba04a002244edaf891b5da7fc1473ae8 (==> kernel 3.8), I discovered a couple of bugs in the implementation. The two bugs concern MSG_COPY interactions with other msgrcv