Tejun Heo 576dd46450 cgroup: drop the matching uid requirement on migration for cgroup v2 ... Along with the write access to the cgroup.procs or tasks file, cgroup has required the writer's euid, unless root, to match [s]uid of the target process or task. On cgroup v1, this is necessary because there's nothing preventing a delegatee from pulling in tasks or processes from all over the system. If a user has a cgroup subdirectory delegated to it, the user would have write access to the cgroup.procs or tasks file. If there are no further checks than file write access check, the user would be able to pull processes from all over the system into its subhierarchy which is clearly not the intended behavior. The matching [s]uid requirement partially prevents this problem by allowing a delegatee to pull in the processes that belongs to it. This isn't a sufficient protection however, because a user would still be able to jump processes across two disjoint sub-hierarchies that has been delegated to them. cgroup v2 resolves the issue by requiring the writer to have access to the common ancestor of the cgroup.procs file of the source and target cgroups. This confines each delegatee to their own sub-hierarchy proper and bases all permission decisions on the cgroup filesystem rather than having to pull in explicit uid matching. cgroup v2 has still been applying the matching [s]uid requirement just for historical reasons. On cgroup2, the requirement doesn't serve any purpose while unnecessarily complicating the permission model. Let's drop it. Signed-off-by: Tejun Heo <tj@kernel.org>		2017-02-02 13:47:56 -05:00
..
bpf	bpf: fix mark_reg_unknown_value for spilled regs on map value marking	2016-12-17 21:27:44 -05:00
cgroup	cgroup: drop the matching uid requirement on migration for cgroup v2	2017-02-02 13:47:56 -05:00
configs	config: android: enable CONFIG_SECCOMP	2016-10-11 15:06:32 -07:00
debug	kdb: call vkdb_printf() from vprintk_default() only when wanted	2016-12-14 16:04:08 -08:00
events	cgroup, perf_event: make perf_event controller work on cgroup2 hierarchy	2017-02-02 13:47:02 -05:00
gcov
irq	genirq/affinity: Fix node generation from cpumask	2016-12-15 12:32:35 +01:00
livepatch	livepatch/module: make TAINT_LIVEPATCH module-specific	2016-08-26 14:42:08 +02:00
locking	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
power	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
printk	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
rcu	rcu: Don't kick unless grace period or request	2016-11-14 10:46:31 -08:00
sched	ktime: Cleanup ktime_set() usage	2016-12-25 17:21:22 +01:00
time	ktime: Cleanup ktime_set() usage	2016-12-25 17:21:22 +01:00
trace	clocksource: Use a plain u64 instead of cycle_t	2016-12-25 11:04:12 +01:00
.gitignore
acct.c
async.c
audit.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2016-12-17 18:44:00 -08:00
audit.h	audit_log_{name,link_denied}: constify struct path	2016-12-05 19:00:38 -05:00
audit_fsnotify.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2016-12-17 18:44:00 -08:00
audit_tree.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2016-12-17 18:44:00 -08:00
audit_watch.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2016-12-17 18:44:00 -08:00
auditfilter.c	audit: add support for session ID user filter	2016-11-29 15:10:12 -05:00
auditsc.c	Merge branch 'stable-4.10' of git://git.infradead.org/users/pcmoore/audit	2016-12-14 14:06:40 -08:00
backtracetest.c
bounds.c
capability.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
compat.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
configs.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
context_tracking.c
cpu.c	cpu/hotplug: Remove obsolete cpu hotplug register/unregister functions	2016-12-25 10:47:43 +01:00
cpu_pm.c
crash_dump.c
cred.c
delayacct.c
dma.c
elfcore.c
exec_domain.c
exit.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
extable.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
fork.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
freezer.c
futex.c	ktime: Get rid of the union	2016-12-25 17:21:22 +01:00
futex_compat.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
groups.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
hung_task.c	hung_task: decrement sysctl_hung_task_warnings only if it is positive	2016-12-12 18:55:09 -08:00
irq_work.c
jump_label.c
kallsyms.c
kcmp.c
Kconfig.freezer
Kconfig.hz
Kconfig.locks	locking/mutex: Allow MUTEX_SPIN_ON_OWNER when DEBUG_MUTEXES	2016-10-25 11:31:51 +02:00
Kconfig.preempt
kcov.c	kcov: make kcov work properly with KASLR enabled	2016-12-20 09:48:47 -08:00
kexec.c
kexec_core.c	kexec: add cond_resched into kimage_alloc_crash_control_pages	2016-12-14 16:04:07 -08:00
kexec_file.c	ima: on soft reboot, save the measurement list	2016-12-20 09:48:44 -08:00
kexec_internal.h	kexec_file: Allow arch-specific memory walking for kexec_add_buffer	2016-11-30 23:14:57 +11:00
kmod.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
kprobes.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
ksysfs.c
kthread.c	kthread: add __printf attributes	2016-12-12 18:55:06 -08:00
latencytop.c
Makefile	cgroup: move cgroup files under kernel/cgroup/	2016-12-27 14:49:05 -05:00
membarrier.c
memremap.c	mm: fix cache mode of dax pmd mappings	2016-09-09 17:34:46 -07:00
module-internal.h
module.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
module_signing.c
notifier.c
nsproxy.c
padata.c	padata: Remove unused but set variables	2016-10-25 11:08:10 +08:00
panic.c	taint/module: Clean up global and module taint flags handling	2016-11-26 11:18:01 -08:00
params.c
pid.c
pid_namespace.c	Merge branch 'nsfs-ioctls' into HEAD	2016-09-22 20:00:36 -05:00
profile.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
ptrace.c	ptrace: Don't allow accessing an undumpable mm	2016-11-22 12:57:38 -06:00
range.c
reboot.c
relay.c	relay: check array offset before using it	2016-12-14 16:04:08 -08:00
resource.c
seccomp.c	Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2016-12-14 13:57:44 -08:00
signal.c	ktime: Get rid of the union	2016-12-25 17:21:22 +01:00
smp.c	kernel/smp: Tell the user we're bringing up secondary CPUs	2016-10-26 12:02:35 +02:00
smpboot.c	kthread/smpboot: do not park in kthread_create_on_cpu()	2016-10-11 15:06:33 -07:00
smpboot.h
softirq.c	softirq: Display IRQ_POLL for irq-poll statistics	2016-10-21 15:45:47 -06:00
stacktrace.c
stop_machine.c	locking/core, stop_machine: Yield the CPU during stop machine()	2016-11-16 10:15:09 +01:00
sys.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
sys_ni.c	move aio compat to fs/aio.c	2016-12-22 22:58:37 -05:00
sysctl.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
sysctl_binary.c	sysctl: add KERN_CONT to deprecated_sysctl_warning()	2016-12-14 16:04:07 -08:00
task_work.c
taskstats.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-11-15 10:54:36 -05:00
test_kprobes.c
torture.c	torture: Convert torture_shutdown() to hrtimer	2016-08-22 10:01:49 -07:00
tracepoint.c	tracing: Have the reg function allow to fail	2016-12-09 09:13:30 -05:00
tsacct.c
ucount.c	mntns: Add a limit on the number of mount namespaces.	2016-08-31 07:28:35 -05:00
uid16.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
up.c	smp: Add function to execute a function synchronously on a CPU	2016-09-05 13:52:39 +02:00
user-return-notifier.c
user.c
user_namespace.c	Merge branch 'nsfs-ioctls' into HEAD	2016-09-22 20:00:36 -05:00
utsname.c	Merge branch 'nsfs-ioctls' into HEAD	2016-09-22 20:00:36 -05:00
utsname_sysctl.c
watchdog.c	kernel/watchdog.c: move hardlockup detector to separate file	2016-12-14 16:04:08 -08:00
watchdog_hld.c	kernel/watchdog.c: move hardlockup detector to separate file	2016-12-14 16:04:08 -08:00
workqueue.c	Merge branch 'for-4.9' into for-4.10	2016-10-19 12:12:40 -04:00
workqueue_internal.h