Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753086AbcDZTsV (ORCPT ); Tue, 26 Apr 2016 15:48:21 -0400 Received: from mail-oi0-f49.google.com ([209.85.218.49]:34666 "EHLO mail-oi0-f49.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753235AbcDZTrA (ORCPT ); Tue, 26 Apr 2016 15:47:00 -0400 Date: Tue, 26 Apr 2016 14:46:57 -0500 From: Seth Forshee To: serge.hallyn@ubuntu.com Cc: linux-kernel@vger.kernel.org, linux-api@vger.kernel.org, containers@lists.linux-foundation.org, ebiederm@xmission.com, morgan@kernel.org, luto@amacapital.net, keescook@chromium.org, jmorris@namei.org Subject: Re: [PATCH 1/1] simplified security.nscapability xattr Message-ID: <20160426194657.GA27639@ubuntu-hedt> References: <1461345993-17526-1-git-send-email-serge.hallyn@ubuntu.com> <1461345993-17526-2-git-send-email-serge.hallyn@ubuntu.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <1461345993-17526-2-git-send-email-serge.hallyn@ubuntu.com> User-Agent: Mutt/1.5.24 (2015-08-30) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 705 Lines: 17 On Fri, Apr 22, 2016 at 12:26:33PM -0500, serge.hallyn@ubuntu.com wrote: > From: Serge Hallyn > > This can only be set by root in his own namespace, and will > only be respected by namespaces with that same root kuid > mapped as root, or namespaces descended from it. > > This allows a simple setxattr to work, allows tar/untar to > work, and allows us to tar in one namespace and untar in > another while preserving the capability, without risking > leaking privilege into a parent namespace. > > Signed-off-by: Serge Hallyn Seems like the simplest possible design which meets the requirements. Acked-by: Seth Forshee