[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <1453775278.3737.5.camel@gmail.com>
Date: Mon, 25 Jan 2016 21:27:58 -0500
From: Daniel Micay <danielmicay@...il.com>
To: kernel-hardening@...ts.openwall.com, "Eric W. Biederman"
<ebiederm@...ssion.com>
Cc: Andy Lutomirski <luto@...capital.net>, Andrew Morton
<akpm@...ux-foundation.org>, Al Viro <viro@...iv.linux.org.uk>, Richard
Weinberger <richard@....at>, Robert Święcki
<robert@...ecki.net>, Dmitry Vyukov <dvyukov@...gle.com>, David Howells
<dhowells@...hat.com>, Miklos Szeredi <mszeredi@...e.cz>, Kostya Serebryany
<kcc@...gle.com>, Alexander Potapenko <glider@...gle.com>, Eric Dumazet
<edumazet@...gle.com>, Sasha Levin <sasha.levin@...cle.com>,
"linux-doc@...r.kernel.org" <linux-doc@...r.kernel.org>,
"linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>
Subject: Re: Re: [PATCH 0/2] sysctl: allow CLONE_NEWUSER
to be disabled
> This feature is already implemented by two distros, and likely wanted
> by others. We cannot ignore that.
Date point: Arch Linux won't be enabling CONFIG_USERNS until there's a
way to disable unprivileged user namespaces. The kernel maintainers are
unwilling to carry long-term out-of-tree patches.
https://github.com/sandstorm-io/sandstorm/blob/d270755b1b55e5be6c96df2cce7c914f35f0d2a2/install.sh#L464-L474
Download attachment "signature.asc" of type "application/pgp-signature" (820 bytes)
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
