aboutsummaryrefslogtreecommitdiffstats
path: root/kernel/user_namespace.c
AgeCommit message (Expand)AuthorFilesLines
2024-02-22user_namespace: remove unnecessary NULL values from kbufLi zeming1-1/+1
2023-11-28mnt_idmapping: decouple from namespacesChristian Brauner1-2/+2
2023-11-18userns: eliminate many kernel-doc warningsRandy Dunlap1-8/+8
2023-11-02Merge tag 'mm-nonmm-stable-2023-11-02-14-08' of git://git.kernel.org/pub/scm/...Linus Torvalds1-1/+1
2023-10-18treewide: mark stuff as __ro_after_initAlexey Dobriyan1-1/+1
2023-10-11binfmt_misc: enable sandboxed mountsChristian Brauner1-0/+3
2023-02-02userns: fix a struct's kernel-doc notationRandy Dunlap1-1/+1
2022-10-09Merge tag 'ucount-rlimits-cleanups-for-v5.19' of git://git.kernel.org/pub/scm...Linus Torvalds1-5/+5
2022-08-16security, lsm: Introduce security_create_user_ns()Frederick Lawler1-0/+5
2022-05-18ucounts: Split rlimit and ucount values and max valuesAlexey Gladkov1-5/+5
2022-02-25ucounts: Fix systemd LimitNPROC with private users regressionEric W. Biederman1-1/+13
2021-09-03memcg: enable accounting for new namesapces and struct nsproxyVasily Averin1-1/+1
2021-06-28Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds1-1/+8
2021-05-07kernel/user_namespace.c: fix typosXiaofeng Cao1-3/+3
2021-04-30ucounts: Set ucount_max to the largest positive value the type can holdAlexey Gladkov1-4/+4
2021-04-30Reimplement RLIMIT_MEMLOCK on top of ucountsAlexey Gladkov1-0/+1
2021-04-30Reimplement RLIMIT_SIGPENDING on top of ucountsAlexey Gladkov1-0/+1
2021-04-30Reimplement RLIMIT_MSGQUEUE on top of ucountsAlexey Gladkov1-0/+1
2021-04-30Reimplement RLIMIT_NPROC on top of ucountsAlexey Gladkov1-1/+2
2021-04-30Add a reference to ucounts for each credAlexey Gladkov1-0/+3
2021-04-20capabilities: require CAP_SETFCAP to map uid 0Serge E. Hallyn1-3/+62
2020-12-14Merge tag 'fixes-v5.11' of git://git.kernel.org/pub/scm/linux/kernel/git/brau...Linus Torvalds1-2/+2
2020-10-16kernel/: fix repeated words in commentsRandy Dunlap1-1/+1
2020-08-19user: Use generic ns_common::countKirill Tkhai1-2/+2
2020-05-09nsproxy: add struct nssetChristian Brauner1-4/+4
2019-07-08Merge tag 'keys-namespace-20190627' of git://git.kernel.org/pub/scm/linux/ker...Linus Torvalds1-5/+4
2019-06-26keys: Move the user and user-session keyrings to the user_namespaceDavid Howells1-3/+1
2019-06-26keys: Namespace keyring namesDavid Howells1-3/+4
2019-06-05treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441Thomas Gleixner1-6/+1
2018-11-07userns: also map extents in the reverse map to kernel IDsJann Horn1-4/+8
2018-08-11userns: move user access out of the mutexJann Horn1-14/+10
2018-06-12treewide: kmalloc() -> kmalloc_array()Kees Cook1-2/+3
2018-03-20fuse: Restrict allow_other to the superblock's namespace or a descendantSeth Forshee1-0/+1
2017-11-16Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds1-58/+291
2017-10-31userns: Simplify insert_extentEric W. Biederman1-11/+8
2017-10-31userns: Make map_id_down a wrapper for map_id_range_downEric W. Biederman1-37/+1
2017-10-31userns: Don't read extents twice in m_startEric W. Biederman1-2/+4
2017-10-31userns: Simplify the user and group mapping functionsEric W. Biederman1-74/+58
2017-10-31userns: Don't special case a count of 0Eric W. Biederman1-7/+3
2017-10-31userns: bump idmap limits to 340Christian Brauner1-30/+320
2017-10-25locking/atomics: COCCINELLE/treewide: Convert trivial ACCESS_ONCE() patterns ...Mark Rutland1-1/+1
2017-07-20userns,pidns: Verify the userns for new pid namespacesEric W. Biederman1-8/+12
2017-03-02sched/headers: Prepare for new header dependencies before moving code to <lin...Ingo Molnar1-0/+1
2016-09-22Merge branch 'nsfs-ioctls' into HEADEric W. Biederman1-0/+25
2016-09-22nsfs: add ioctl to get a parent namespaceAndrey Vagin1-0/+1
2016-09-22kernel: add a helper to get an owning user namespace for a namespaceAndrey Vagin1-0/+24
2016-09-22userns: When the per user per user namespace limit is reached return ENOSPCEric W. Biederman1-1/+1
2016-08-08userns: Generalize the user namespace count into ucountEric W. Biederman1-2/+14
2016-08-08userns: Make the count of user namespaces per userEric W. Biederman1-4/+7
2016-08-08userns: Add a limit on the number of user namespacesEric W. Biederman1-11/+20
2016-08-08userns: Add per user namespace sysctls.Eric W. Biederman1-2/+16
2016-08-08userns: Free user namespaces in process contextEric W. Biederman1-3/+11
2016-06-24fs: Limit file caps to the user namespace of the super blockSeth Forshee1-0/+14
2016-01-04kernel/*: switch to memdup_user_nul()Al Viro1-14/+7
2015-09-04capabilities: ambient capabilitiesAndy Lutomirski1-0/+1
2015-08-12userns,pidns: Force thread group sharing, not signal handler sharing.Eric W. Biederman1-2/+2
2014-12-17Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds1-11/+113
2014-12-11userns; Correct the comment in map_writeEric W. Biederman1-1/+1
2014-12-11userns: Allow setting gid_maps without privilege when setgroups is disabledEric W. Biederman1-0/+5
2014-12-11userns: Add a knob to disable setgroups on a per user namespace basisEric W. Biederman1-0/+85
2014-12-09userns: Rename id_map_mutex to userns_state_mutexEric W. Biederman1-8/+6
2014-12-09userns: Only allow the creator of the userns unprivileged mappingsEric W. Biederman1-2/+4
2014-12-09userns: Check euid no fsuid when establishing an unprivileged uid mappingEric W. Biederman1-1/+1
2014-12-09userns: Don't allow unprivileged creation of gid mappingsEric W. Biederman1-4/+0
2014-12-09userns: Don't allow setgroups until a gid mapping has been setablishedEric W. Biederman1-0/+14
2014-12-05userns: Document what the invariant required for safe unprivileged mappings.Eric W. Biederman1-1/+3
2014-12-04copy address of proc_ns_ops into ns_commonAl Viro1-0/+1
2014-12-04new helpers: ns_alloc_inum/ns_free_inumAl Viro1-2/+2
2014-12-04make proc_ns_operations work with struct ns_common * instead of void *Al Viro1-9/+3
2014-12-04switch the rest of proc_ns_operations to working with &...->nsAl Viro1-5/+9
2014-12-04common object embedded into various struct ....nsAl Viro1-3/+3
2014-08-08proc: constify seq_operationsFabian Frederick1-3/+3
2014-06-06kernel/user_namespace.c: kernel-doc/checkpatch fixesFabian Frederick1-13/+20
2014-04-14user namespace: fix incorrect memory barriersMikulas Patocka1-6/+5
2014-04-03kernel: audit/fix non-modular users of module_init in core codePaul Gortmaker1-1/+1
2014-02-20user_namespace.c: Remove duplicated word in commentBrian Campbell1-1/+1
2013-09-24KEYS: Add per-user_namespace registers for persistent per-UID kerberos cachesDavid Howells1-0/+6
2013-09-07Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds1-2/+0
2013-08-26userns: Better restrictions on when proc and sysfs can be mountedEric W. Biederman1-2/+0
2013-08-08userns: limit the maximum depth of user_namespace->parent chainOleg Nesterov1-0/+4
2013-08-06userns: unshare_userns(&cred) should not populate cred on failureOleg Nesterov1-4/+9
2013-05-01Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds1-1/+1
2013-05-01proc: Split the namespace stuff out into linux/proc_ns.hDavid Howells1-1/+1
2013-04-14userns: Changing any namespace id mappings should require privilegesAndy Lutomirski1-3/+3
2013-04-14userns: Check uid_map's opener's fsuid, not the current fsuidAndy Lutomirski1-2/+2
2013-04-14userns: Don't let unprivileged users trick privileged users into setting the ...Eric W. Biederman1-4/+8
2013-03-27userns: Restrict when proc and sysfs can be mountedEric W. Biederman1-0/+2
2013-03-27userns: Don't allow creation if the user is chrootedEric W. Biederman1-0/+9
2013-03-13userns: Don't allow CLONE_NEWUSER | CLONE_FSEric W. Biederman1-0/+4
2013-01-26userns: Allow any uid or gid mappings that don't overlap.Eric W. Biederman1-6/+39
2013-01-26userns: Avoid recursion in put_user_nsEric W. Biederman1-8/+9
2012-12-14userns: Fix typo in description of the limitation of userns_installEric W. Biederman1-1/+1
2012-11-20proc: Usable inode numbers for the namespace file descriptors.Eric W. Biederman1-0/+15
2012-11-20userns: For /proc/self/{uid,gid}_map derive the lower userns from the struct ...Eric W. Biederman1-2/+10
2012-11-20userns: Implement unshare of the user namespaceEric W. Biederman1-0/+15
2012-11-20userns: Implent proc namespace operationsEric W. Biederman1-17/+73
2012-11-20userns: Allow setting a userns mapping to your current uid.Eric W. Biederman1-0/+15
2012-09-18userns: Add kprojid_t and associated infrastructure in projid.hEric W. Biederman1-1/+127
2012-05-03userns: Store uid and gid values in struct cred with kuid_t and kgid_t typesEric W. Biederman1-2/+2
2012-04-26userns: Rework the user_namespace adding uid/gid mapping supportEric W. Biederman1-41/+504
2012-04-26userns: Simplify the user_namespace by making userns->creator a kuid.Eric W. Biederman1-22/+20
2012-04-07userns: Disassociate user_struct from the user_namespace.Eric W. Biederman1-5/+1
2012-04-07userns: Start out with a full set of capabilities.Eric W. Biederman1-0/+9
2012-04-07userns: Add an explicit reference to the parent user namespaceEric W. Biederman1-7/+6
2012-04-07cred: Refcount the user_ns pointed to by the cred.Eric W. Biederman1-3/+5
2012-04-07userns: Use cred->user_ns instead of cred->user->user_nsEric W. Biederman1-2/+2
2011-10-31kernel: Map most files to use export.h instead of module.hPaul Gortmaker1-1/+1
2011-01-13user_ns: improve the user_ns on-the-slab packagingPavel Emelyanov1-3/+12
2010-06-16user_ns: Introduce user_nsmap_uid and user_ns_map_gid.Eric W. Biederman1-0/+44
2010-05-21kref: remove kref_setNeilBrown1-2/+2
2009-02-27Fix recursive lock in free_uid()/free_user_ns()David Howells1-4/+17
2008-11-24User namespaces: set of cleanups (v2)Serge Hallyn1-45/+30
2008-11-14CRED: Inaugurate COW credentialsDavid Howells1-1/+11
2008-11-14CRED: Wrap task credential accesses in the core kernelDavid Howells1-1/+1
2008-08-23removed unused #include <linux/version.h>'sAdrian Bunk1-1/+0
2008-04-29eCryptfs: make key module subsystem respect namespacesMichael Halcrow1-0/+1
2008-04-29kernel: explicitly include required header files under kernel/Robert P. J. Day1-0/+1
2008-02-08namespaces: cleanup the code managed with the USER_NS optionPavel Emelyanov1-13/+0
2007-09-19Fix user namespace exiting OOPsPavel Emelyanov1-1/+1
2007-09-19Convert uid hash to hlistPavel Emelyanov1-1/+1
2007-08-31userns: don't leak root userAlexey Dobriyan1-0/+1
2007-07-16fix create_new_namespaces() return valueCedric Le Goater1-3/+3
2007-07-16user namespace: add unshareSerge E. Hallyn1-1/+45
2007-07-16user namespace: add the frameworkCedric Le Goater1-0/+43