Received: by 2002:a25:e74b:0:0:0:0:0 with SMTP id e72csp523610ybh; Wed, 15 Jul 2020 08:13:00 -0700 (PDT) X-Google-Smtp-Source: ABdhPJyDrBlubjJwxlfkTtK6kI5Ky1oZ4yPdlLvUwfJY+4lLbIR3XyaAnCB9bdT9Ds4DwuE04RZz X-Received: by 2002:a17:906:2654:: with SMTP id i20mr10075228ejc.80.1594825980125; Wed, 15 Jul 2020 08:13:00 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1594825980; cv=none; d=google.com; s=arc-20160816; b=qVXmwpV2nTSV1GMVnDw6uuat83OeBBv08ndVXLa/AVI0PIKq9+rJLXcU3KQ1/1Iv/F dq+sNZplc4fHdaL4UF4fY6vrL1GxR/2JLB2L3ENI1DtMHiLfqulaOJ7UrjB3b7RaoHjJ OQ+F4UZYPiBjMMC5z4wvNjPyrK2zOpR1V1YnidMGRKkDjZ6ADiFXuAuRB/N2GgCafY44 Ttr4fEPdzbLa95GE/9BZQ2T+4D7c7Oxz5IXJyiwXCRP5UgKHXth8aGOsRwTLLfUUp35N Y/W1ZS1qQtjJVBK6oQ3G+nqTyrBRE65JEo+3Ag641h1GLLn5DJUbCRK4wtlxZbbveeO3 HMlQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:in-reply-to:content-disposition :mime-version:references:message-id:subject:cc:to:from:date; bh=ERQ3X1Yj7EFIq2yDRjHqTQqWkJjICZAA/pV9OVPiQPE=; b=G/w2ND46nya7oQsEAEGsw0GIHS3VXEHRhiCuafpJph8w70za0w0HTBaUAz3ZGi/ayM Ruu1K22KwoTh51mVKZgaOxF6KssB/7I35SQEqRw+lTAacNQkEXxDhRBbLH5qerwU64Nh umem+OzLGzoH7NS16IM+QL7WOXCU4+qL1PxkV7BBG9A3k7Xpm/mY9GOOeATxojMQk852 UMeUMefp/0whnnGiA82inT2rT9fniO0gHbeiLV6L7lXnVYQPMH+odjAF0f9xEslamBMh 7Q2Ksw9IaNkKiJNfAvqaYaB5WFOjVwGVO0HvHCXsiDMXJhxrfas43PyO4LWyrcelHPyV g4FQ== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id dn1si1880602ejc.638.2020.07.15.08.12.34; Wed, 15 Jul 2020 08:13:00 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1728352AbgGOPI6 (ORCPT + 99 others); Wed, 15 Jul 2020 11:08:58 -0400 Received: from youngberry.canonical.com ([91.189.89.112]:50333 "EHLO youngberry.canonical.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1728306AbgGOPI5 (ORCPT ); Wed, 15 Jul 2020 11:08:57 -0400 Received: from ip5f5af08c.dynamic.kabel-deutschland.de ([95.90.240.140] helo=wittgenstein) by youngberry.canonical.com with esmtpsa (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.86_2) (envelope-from ) id 1jvj1T-0003xb-Lh; Wed, 15 Jul 2020 15:08:39 +0000 Date: Wed, 15 Jul 2020 17:08:38 +0200 From: Christian Brauner To: Adrian Reber Cc: Eric Biederman , Pavel Emelyanov , Oleg Nesterov , Dmitry Safonov <0x7f454c46@gmail.com>, Andrei Vagin , Nicolas Viennot , =?utf-8?B?TWljaGHFgiBDxYJhcGnFhHNraQ==?= , Kamil Yurtsever , Dirk Petersen , Christine Flood , Casey Schaufler , Mike Rapoport , Radostin Stoyanov , Cyrill Gorcunov , Serge Hallyn , Stephen Smalley , Sargun Dhillon , Arnd Bergmann , linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org, selinux@vger.kernel.org, Eric Paris , Jann Horn , linux-fsdevel@vger.kernel.org Subject: Re: [PATCH v5 3/6] pid_namespace: use checkpoint_restore_ns_capable() for ns_last_pid Message-ID: <20200715150838.rcmv73bkvhf35zuz@wittgenstein> References: <20200715144954.1387760-1-areber@redhat.com> <20200715144954.1387760-4-areber@redhat.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <20200715144954.1387760-4-areber@redhat.com> Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Wed, Jul 15, 2020 at 04:49:51PM +0200, Adrian Reber wrote: > Use the newly introduced capability CAP_CHECKPOINT_RESTORE to allow > writing to ns_last_pid. > > Signed-off-by: Adrian Reber > Signed-off-by: Nicolas Viennot > --- Acked-by: Christian Brauner