[Devel] Re: [PATCH 4/8] af_unix: Allow SO_PEERCRED to work across namespaces.

Pavel Emelyanov xemul at openvz.org
Tue Jun 15 01:04:34 PDT 2010


On 06/13/2010 05:30 PM, Eric W. Biederman wrote:
> 
> Use struct pid and struct cred to store the peer credentials on struct
> sock.  This gives enough information to convert the peer credential
> information to a value relative to whatever namespace the socket is in
> at the time.
> 
> This removes nasty surprises when using SO_PEERCRED on socket
> connetions where the processes on either side are in different pid and
> user namespaces.
> 
> Signed-off-by: Eric W. Biederman <ebiederm at xmission.com>

Acked-by: Pavel Emelyanov <xemul at openvz.org>
_______________________________________________
Containers mailing list
Containers at lists.linux-foundation.org
https://lists.linux-foundation.org/mailman/listinfo/containers




More information about the Devel mailing list