summaryrefslogtreecommitdiff
path: root/kernel/user_namespace.c
AgeCommit message (Expand)Author
2015-01-08userns: Allow setting gid_maps without privilege when setgroups is disabledEric W. Biederman
2015-01-08userns: Add a knob to disable setgroups on a per user namespace basisEric W. Biederman
2015-01-08userns: Rename id_map_mutex to userns_state_mutexEric W. Biederman
2015-01-08userns: Only allow the creator of the userns unprivileged mappingsEric W. Biederman
2015-01-08userns: Check euid no fsuid when establishing an unprivileged uid mappingEric W. Biederman
2015-01-08userns: Don't allow unprivileged creation of gid mappingsEric W. Biederman
2015-01-08userns: Don't allow setgroups until a gid mapping has been setablishedEric W. Biederman
2015-01-08userns: Document what the invariant required for safe unprivileged mappings.Eric W. Biederman
2014-04-26user namespace: fix incorrect memory barriersMikulas Patocka
2014-02-20user_namespace.c: Remove duplicated word in commentBrian Campbell
2013-09-24KEYS: Add per-user_namespace registers for persistent per-UID kerberos cachesDavid Howells
2013-09-07Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds
2013-08-26userns: Better restrictions on when proc and sysfs can be mountedEric W. Biederman
2013-08-08userns: limit the maximum depth of user_namespace->parent chainOleg Nesterov
2013-08-06userns: unshare_userns(&cred) should not populate cred on failureOleg Nesterov
2013-05-01Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds
2013-05-01proc: Split the namespace stuff out into linux/proc_ns.hDavid Howells
2013-04-14userns: Changing any namespace id mappings should require privilegesAndy Lutomirski
2013-04-14userns: Check uid_map's opener's fsuid, not the current fsuidAndy Lutomirski
2013-04-14userns: Don't let unprivileged users trick privileged users into setting the ...Eric W. Biederman
2013-03-27userns: Restrict when proc and sysfs can be mountedEric W. Biederman
2013-03-27userns: Don't allow creation if the user is chrootedEric W. Biederman
2013-03-13userns: Don't allow CLONE_NEWUSER | CLONE_FSEric W. Biederman
2013-01-26userns: Allow any uid or gid mappings that don't overlap.Eric W. Biederman
2013-01-26userns: Avoid recursion in put_user_nsEric W. Biederman
2012-12-14userns: Fix typo in description of the limitation of userns_installEric W. Biederman
2012-11-20proc: Usable inode numbers for the namespace file descriptors.Eric W. Biederman
2012-11-20userns: For /proc/self/{uid,gid}_map derive the lower userns from the struct ...Eric W. Biederman
2012-11-20userns: Implement unshare of the user namespaceEric W. Biederman
2012-11-20userns: Implent proc namespace operationsEric W. Biederman
2012-11-20userns: Allow setting a userns mapping to your current uid.Eric W. Biederman
2012-09-18userns: Add kprojid_t and associated infrastructure in projid.hEric W. Biederman
2012-05-03userns: Store uid and gid values in struct cred with kuid_t and kgid_t typesEric W. Biederman
2012-04-26userns: Rework the user_namespace adding uid/gid mapping supportEric W. Biederman
2012-04-26userns: Simplify the user_namespace by making userns->creator a kuid.Eric W. Biederman
2012-04-07userns: Disassociate user_struct from the user_namespace.Eric W. Biederman
2012-04-07userns: Start out with a full set of capabilities.Eric W. Biederman
2012-04-07userns: Add an explicit reference to the parent user namespaceEric W. Biederman
2012-04-07cred: Refcount the user_ns pointed to by the cred.Eric W. Biederman
2012-04-07userns: Use cred->user_ns instead of cred->user->user_nsEric W. Biederman
2011-10-31kernel: Map most files to use export.h instead of module.hPaul Gortmaker
2011-01-13user_ns: improve the user_ns on-the-slab packagingPavel Emelyanov
2010-06-16user_ns: Introduce user_nsmap_uid and user_ns_map_gid.Eric W. Biederman
2010-05-21kref: remove kref_setNeilBrown
2009-02-27Fix recursive lock in free_uid()/free_user_ns()David Howells
2008-11-24User namespaces: set of cleanups (v2)Serge Hallyn
2008-11-14CRED: Inaugurate COW credentialsDavid Howells
2008-11-14CRED: Wrap task credential accesses in the core kernelDavid Howells
2008-08-23removed unused #include <linux/version.h>'sAdrian Bunk
2008-04-29eCryptfs: make key module subsystem respect namespacesMichael Halcrow