Received: by 2002:a05:6a10:9848:0:0:0:0 with SMTP id x8csp208147pxf; Thu, 11 Mar 2021 01:47:47 -0800 (PST) X-Google-Smtp-Source: ABdhPJzs6jbiU7jpS0xFuXwoo0ThriZ2f6F2mY0qelACKkOT+6FQJ2Z8xpKmANKyr7FQv+a0ziNk X-Received: by 2002:a05:6402:4242:: with SMTP id g2mr7583093edb.329.1615456067599; Thu, 11 Mar 2021 01:47:47 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1615456067; cv=none; d=google.com; s=arc-20160816; b=Tc1s1lEwmmiWztZfsX+LojuoNIKaRRnQ1BhN82EXsS6Uz3MujH8oFwPKRslZvY/vUS E6JyPJwh1W2U94y/RQ204BKswSvuO/56dK6FQ9X7a+8QUH3Di1+blXUH0/spYYxDc4J9 titxNWScixUsgaf7gvmDQNdbdoVLj85hURi23lJ36/7y1IZ0UOwxnUFOYCdL/F99iywH uXN15tOnBRM3Cb5j0oQi7Z6WgQ6YS0Q2QFxi9d62vnTMJp2KZIocw8zfkeHLnyQC/G2d VzdCUIGOHmftLa34Lr3i2dmurUtseKBJierC3lHBIJLQ1JYLICSa9RdOETdpf2RmMUmm hvOA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:content-language :mime-version:accept-language:in-reply-to:references:message-id:date :thread-index:thread-topic:subject:cc:to:from; bh=jBp5aKH894J77TMKXDeiuw+iaocA4KjexfP8NvfrYzw=; b=bnqLfhL3jCbpXsK/jfsCnVkfNFuqT6RDjyxrqcUTVCrkWKqsvgYlq6aqytwiXrNpiW 86Nd/DtuSsJTjkhPn0jh6Om+/XtMZct4sgrv49b020bkGtY9+0bzsMQNpFJPeIxFmJtM rVQPS0rVbeu76W9xHWXPuBEfVJutXJ11QalLrX3BM5USybJLDHsavB3AGqF0hd7sj4ap FP3KUcgkuHP/FAL82Wla25dST2rh1wCiGQg4b6InvtgZH7MWlrXed4+6jSQSWa9agT2z x1RWDmvjNtxGwMlmfh0/Q277R91vcF1AMGS9suiRDcGJ498M8Vgbh0EYW9oiq58Z9Tc/ CbRQ== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=aculab.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id dg2si915573edb.136.2021.03.11.01.47.24; Thu, 11 Mar 2021 01:47:47 -0800 (PST) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=aculab.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S232165AbhCKJqD (ORCPT + 99 others); Thu, 11 Mar 2021 04:46:03 -0500 Received: from eu-smtp-delivery-151.mimecast.com ([185.58.86.151]:43012 "EHLO eu-smtp-delivery-151.mimecast.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S232155AbhCKJps (ORCPT ); Thu, 11 Mar 2021 04:45:48 -0500 Received: from AcuMS.aculab.com (156.67.243.126 [156.67.243.126]) (Using TLS) by relay.mimecast.com with ESMTP id uk-mta-225-4UYgS0e5NKS5qbXrFZ57sA-1; Thu, 11 Mar 2021 09:45:44 +0000 X-MC-Unique: 4UYgS0e5NKS5qbXrFZ57sA-1 Received: from AcuMS.Aculab.com (fd9f:af1c:a25b:0:43c:695e:880f:8750) by AcuMS.aculab.com (fd9f:af1c:a25b:0:43c:695e:880f:8750) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Thu, 11 Mar 2021 09:45:43 +0000 Received: from AcuMS.Aculab.com ([fe80::43c:695e:880f:8750]) by AcuMS.aculab.com ([fe80::43c:695e:880f:8750%12]) with mapi id 15.00.1347.000; Thu, 11 Mar 2021 09:45:43 +0000 From: David Laight To: "'Eric W. Biederman'" , =?utf-8?B?TWlja2HDq2wgU2FsYcO8bg==?= CC: Al Viro , James Morris , Serge Hallyn , Andy Lutomirski , Casey Schaufler , Christian Brauner , Christoph Hellwig , David Howells , Dominik Brodowski , "John Johansen" , Kees Cook , Kentaro Takeda , Tetsuo Handa , "kernel-hardening@lists.openwall.com" , "linux-fsdevel@vger.kernel.org" , "linux-kernel@vger.kernel.org" , "linux-security-module@vger.kernel.org" , =?utf-8?B?TWlja2HDq2wgU2FsYcO8bg==?= Subject: RE: [PATCH v2 1/1] fs: Allow no_new_privs tasks to call chroot(2) Thread-Topic: [PATCH v2 1/1] fs: Allow no_new_privs tasks to call chroot(2) Thread-Index: AQHXFeMKfWlhWd9Z4UmL5GfL4v4dzap+ifLA Date: Thu, 11 Mar 2021 09:45:43 +0000 Message-ID: References: <20210310181857.401675-1-mic@digikod.net> <20210310181857.401675-2-mic@digikod.net> In-Reply-To: Accept-Language: en-GB, en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.202.205.107] MIME-Version: 1.0 Authentication-Results: relay.mimecast.com; auth=pass smtp.auth=C51A453 smtp.mailfrom=david.laight@aculab.com X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: aculab.com Content-Language: en-US Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: base64 Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org RnJvbTogRXJpYyBXLiBCaWVkZXJtYW4NCj4gU2VudDogMTAgTWFyY2ggMjAyMSAxOToyNA0KLi4u DQo+IFRoZSBhY3R1YWwgY2xhc3NpYyBjaHJvb3QgZXNjYXBlIGlzLg0KPiBjaGRpcigiLyIpOw0K PiBjaHJvb3QoIi9zb21lZGlyIik7DQo+IGNoZGlyKCIuLi8uLi8uLi8uLiIpOw0KDQpUaGF0IG9u ZSBpcyBlYXNpbHkgY2hlY2tlZC4NCg0KSSB0aG91Z2h0IHNvbWV0aGluZyBsaWtlOg0KY2hyb290 KCIvc29tZWRpciIpOw0KY2hkaXIoIi9zb21lcGF0aCIpOw0KDQpGcmllbmRseSBwcm9jZXNzOg0K bXZkaXIoIi9zb21lZGlyL3NvbWVfcGF0aCIsICIvYmFyIik7DQoNCndhcyB0aGUgYWN0dWFsIGVz Y2FwZT8NCg0KCURhdmlkDQoNCi0NClJlZ2lzdGVyZWQgQWRkcmVzcyBMYWtlc2lkZSwgQnJhbWxl eSBSb2FkLCBNb3VudCBGYXJtLCBNaWx0b24gS2V5bmVzLCBNSzEgMVBULCBVSw0KUmVnaXN0cmF0 aW9uIE5vOiAxMzk3Mzg2IChXYWxlcykNCg==