This bug was fixed in the package linux - 4.1.0-3.3
---------------
linux (4.1.0-3.3) wily; urgency=low
[ Andy Whitcroft ]
* Release Tracking Bug
- LP: #1478897
[ Colin Ian King ]
* SAUCE: KEYS: ensure we free the assoc array edit if edit is valid
- CVE-2015-1333
[ Seth Forshee ]
* SAUCE: overlayfs: Enable user namespace mounts for the "overlay" fstype
- LP: #1478578
[ Upstream Kernel Changes ]
* sched/stop_machine: Fix deadlock between multiple stop_two_cpus()
- LP: #1461620
* x86/nmi: Enable nested do_nmi() handling for 64-bit kernels
* x86/nmi/64: Remove asm code that saves cr2
* x86/nmi/64: Switch stacks on userspace NMI entry
* x86/nmi/64: Reorder nested NMI checks
* x86/nmi/64: Use DF to avoid userspace RSP confusing nested NMI
detection
-- Andy Whitcroft <a...@canonical.com> Tue, 28 Jul 2015 11:59:03 +0100
** Changed in: linux (Ubuntu)
Status: Fix Committed => Fix Released
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2015-1333
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1478578
Title:
"overlay" fs type not mountable in unprivileged containers
Status in linux package in Ubuntu:
Fix Released
Bug description:
The "overlay" fstype is not mountable from within non-init user
namespaces in wily. This is a regression wrt vivid and is causing LXC
adt failures:
https://jenkins.qa.ubuntu.com/job/wily-adt-lxc/lastBuild/
To reproduce, assuming you have an unprivileged LXC container named
u1:
$ lxc-clone -s u1 u2
$ lxc-start -n u2 --logfile=lxc.out --logpriority=DEBUG
Starting u2 will fail, with the following in lxc.out:
lxc-start 1438006183.232 ERROR bdev - bdev.c:overlayfs_mount:2253
- Operation not permitted - overlayfs: error mounting
/home/ubuntu/.local/share/lxc/u1/rootfs onto /usr/lib/x86_64-linux-
gnu/lxc options
upperdir=/home/ubuntu/.local/share/lxc/u2/delta0,lowerdir=/home/ubuntu/.local/share/lxc/u1/rootfs,workdir=/home/ubuntu/.local/share/lxc/u2/olwork
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1478578/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
