[lxc-devel] Kernel bug? Setuid apps and user namespaces

2013-10-22 Thread Sean Pajot
I've been playing with User Namespaces somewhat extensively and I think I've come across a bug in the handling of /proc/$PID/ entries. This is my example case on a 3.10.x kernel: -- /var/lib/lxc/test1/config lxc.rootfs = /lxc/c1 lxc.id_map = u 0 100 10 lxc.id_map = g 0 100 10 lxc

Re: [lxc-devel] Kernel bug? Setuid apps and user namespaces

2013-10-22 Thread Sean Pajot
On 10/22/2013 03:50 PM, Eric W. Biederman wrote: > Serge Hallyn writes: > >> Quoting Sean Pajot (sean.pa...@execulink.com): >>> I've been playing with User Namespaces somewhat extensively and I think I've >>> come across a bug in the handling of /proc/$

Re: [lxc-devel] Kernel bug? Setuid apps and user namespaces

2013-10-24 Thread Sean Pajot
On 10/23/2013 12:54 AM, Eric W. Biederman wrote: > Sean Pajot writes: > >> On 10/22/2013 03:50 PM, Eric W. Biederman wrote: >>> Serge Hallyn writes: >>> >>>> Quoting Sean Pajot (sean.pa...@execulink.com): >>>>> I've been playing wit