Skip to content
Commit bf056bfa authored by Eric W. Biederman's avatar Eric W. Biederman
Browse files

proc: Fix the namespace inode permission checks.



Change the proc namespace files into symlinks so that
we won't cache the dentries for the namespace files
which can bypass the ptrace_may_access checks.

To support the symlinks create an additional namespace
inode with it's own set of operations distinct from the
proc pid inode and dentry methods as those no longer
make sense.

Signed-off-by: default avatarEric W. Biederman <ebiederm@xmission.com>
parent 33d6dce6
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment