Re: [PATCH] Add supplementary UIDs, and getusers/setusers system calls

2014-11-20 Thread Andy Lutomirski
On Nov 20, 2014 7:16 AM, "Eric W. Biederman" wrote: > > Josh Triplett writes: > > > Analogous to the supplementary GID list, the supplementary UID list > > provides a set of additional user credentials that a process can act as. > > A process with CAP_SETUID can set its UID list arbitrarily; a pr

Re: [PATCH] Add supplementary UIDs, and getusers/setusers system calls

2014-11-20 Thread josh
On Thu, Nov 20, 2014 at 09:14:50AM -0600, Eric W. Biederman wrote: > Josh Triplett writes: > > Analogous to the supplementary GID list, the supplementary UID list > > provides a set of additional user credentials that a process can act as. > > A process with CAP_SETUID can set its UID list arbitra

Re: [PATCH] Add supplementary UIDs, and getusers/setusers system calls

2014-11-20 Thread Eric W. Biederman
Josh Triplett writes: > Analogous to the supplementary GID list, the supplementary UID list > provides a set of additional user credentials that a process can act as. > A process with CAP_SETUID can set its UID list arbitrarily; a process > without CAP_SETUID can only reduce its UID list. > > Thi

Re: [PATCH] Add supplementary UIDs, and getusers/setusers system calls

2014-11-15 Thread Josh Triplett
On Sat, Nov 15, 2014 at 11:08:31PM -0800, Josh Triplett wrote: > asmlinkage long sys_setgroups(int gidsetsize, gid_t __user *grouplist); > +asmlinkage long sys_setusers(int uidsetsize, uid_t __user *grouplist); Obvious typo here: s/grouplist/userlist/. Will fix in a v2, but I'll wait for other f

[PATCH] Add supplementary UIDs, and getusers/setusers system calls

2014-11-15 Thread Josh Triplett
Analogous to the supplementary GID list, the supplementary UID list provides a set of additional user credentials that a process can act as. A process with CAP_SETUID can set its UID list arbitrarily; a process without CAP_SETUID can only reduce its UID list. This allows each user to have a set of