Date: Tue, 16 Aug 2011 10:39:01 +0400 From: Vasiliy Kulikov <segoon@...nwall.com> To: kernel-hardening@...ts.openwall.com Subject: Re: 32/64 bitness restriction for pid namespace Solar, On Tue, Aug 16, 2011 at 01:33 +0400, Solar Designer wrote: > Are you proposing this for OpenVZ and distro kernels now? For OpenVZ it needs s/CAP_SYS_ADMIN/CAP_VE_SYS_ADMIN/ to be able to use the feature by in-CT root programs. But given it doesn't go to upstream, it's unlikely to be needed. As for the implementation, it looks it's ready and it passes lock.c tests. But, as usual, additional testing doesn't hurt :) Thanks, -- Vasiliy
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.