Eric W. Biederman 4c44aaafa8 userns: Kill task_user_ns ... The task_user_ns function hides the fact that it is getting the user namespace from struct cred on the task. struct cred may go away as soon as the rcu lock is released. This leads to a race where we can dereference a stale user namespace pointer. To make it obvious a struct cred is involved kill task_user_ns. To kill the race modify the users of task_user_ns to only reference the user namespace while the rcu lock is held. Cc: Kees Cook <keescook@chromium.org> Cc: James Morris <james.l.morris@oracle.com> Acked-by: Kees Cook <keescook@chromium.org> Acked-by: Serge Hallyn <serge.hallyn@canonical.com> Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>		2012-11-20 04:17:44 -08:00
..
Kconfig	security: allow Yama to be unconditionally stacked	2012-09-05 14:12:31 -07:00
Makefile
yama_lsm.c	userns: Kill task_user_ns	2012-11-20 04:17:44 -08:00