[Devel] [PATCH RHEL7 COMMIT] ve/user_ns: Enable USER_NS /proc/$pid/ns/user link

[Konstantin Khorenko]

The commit is pushed to "branch-rh7-3.10.0-229.7.2.vz7.8.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git
after rh7-3.10.0-229.7.2.vz7.8.4
------>
commit 9f535f34974fb18e7c467837d36ba1e8681d2bdd
Author: Kirill Tkhai <ktkhai at odin.com>
Date:   Thu Oct 8 14:32:47 2015 +0400

    ve/user_ns: Enable USER_NS /proc/$pid/ns/user link
    
    Since we use user_ns inside a CT, vzctl should have
    a possibility to enter a VE using it's init_cred->user_ns.
    
    setns is allowed for a tasks who are CAP_SYSADMIN in the ns,
    i.e. a task from a parent user_ns, but vice versa is not true.
    So this should be safe.
    
    Signed-off-by: Kirill Tkhai <ktkhai at odin.com>
    Acked-by: Andrew Vagin <avagin at openvz.org>
---
 fs/proc/namespaces.c | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/fs/proc/namespaces.c b/fs/proc/namespaces.c
index ec7e269..54bdc67 100644
--- a/fs/proc/namespaces.c
+++ b/fs/proc/namespaces.c
@@ -28,8 +28,7 @@ static const struct proc_ns_operations *ns_entries[] = {
 #ifdef CONFIG_PID_NS
 	&pidns_operations,
 #endif
-/* Currently disabled in RHEL */
-#if 0
+#ifdef CONFIG_USER_NS
 	&userns_operations,
 #endif
 	&mntns_operations,