Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.kernel > #1313529
| From | One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk> |
|---|---|
| Newsgroups | linux.kernel |
| Subject | Re: [kernel-hardening] 2015 kernel CVEs |
| Date | 2016-01-20 22:30 +0100 |
| Message-ID | <qT8ud-3LS-7@gated-at.bofh.it> (permalink) |
| References | <qSEFQ-4S-29@gated-at.bofh.it> <qSNpM-5Pz-3@gated-at.bofh.it> <qT7ot-36w-1@gated-at.bofh.it> |
| Organization | Intel Corporation |
> I know of at least two projects that enter user namespaces without the > necessary care, one of them is LXC. > > > > There is room for improvement in this area but I don't see how this > > qualifies as a CVE. > > I think I agree with that. If there are projects that screw it up then there should be a CVE - it just needs someone to update the CVE to indicate where the actual flaw is. Alan
Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
2015 kernel CVEs Dan Carpenter <dan.carpenter@oracle.com> - 2016-01-19 14:40 +0100
Re: 2015 kernel CVEs One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk> - 2016-01-19 16:00 +0100
Re: [kernel-hardening] 2015 kernel CVEs Ben Hutchings <ben@decadent.org.uk> - 2016-01-19 17:40 +0100
Re: [kernel-hardening] 2015 kernel CVEs Greg KH <greg@kroah.com> - 2016-01-19 19:00 +0100
Re: [kernel-hardening] 2015 kernel CVEs Ben Hutchings <ben@decadent.org.uk> - 2016-01-20 18:10 +0100
Re: [kernel-hardening] 2015 kernel CVEs Greg KH <greg@kroah.com> - 2016-01-20 19:10 +0100
Re: [kernel-hardening] 2015 kernel CVEs Jiri Kosina <jikos@kernel.org> - 2016-01-21 17:10 +0100
Re: [kernel-hardening] 2015 kernel CVEs Ben Hutchings <ben@decadent.org.uk> - 2016-01-21 19:50 +0100
Re: 2015 kernel CVEs Peter Hurley <peter@hurleysoftware.com> - 2016-01-19 18:00 +0100
Re: 2015 kernel CVEs Josh Boyer <jwboyer@fedoraproject.org> - 2016-01-19 18:10 +0100
Re: 2015 kernel CVEs Greg KH <gregkh@linuxfoundation.org> - 2016-01-19 19:00 +0100
Re: [kernel-hardening] Re: 2015 kernel CVEs Marcus Meissner <meissner@suse.de> - 2016-01-20 08:20 +0100
Re: 2015 kernel CVEs Al Viro <viro@ZenIV.linux.org.uk> - 2016-01-19 19:10 +0100
Re: [kernel-hardening] Re: 2015 kernel CVEs ebiederm@xmission.com (Eric W. Biederman) - 2016-01-20 00:00 +0100
Re: [kernel-hardening] 2015 kernel CVEs ebiederm@xmission.com (Eric W. Biederman) - 2016-01-20 00:00 +0100
Re: [kernel-hardening] 2015 kernel CVEs Jann Horn <jann@thejh.net> - 2016-01-20 21:20 +0100
Re: [kernel-hardening] 2015 kernel CVEs One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk> - 2016-01-20 22:30 +0100
Re: [kernel-hardening] 2015 kernel CVEs Kees Cook <keescook@chromium.org> - 2016-01-20 00:40 +0100
Re: 2015 kernel CVEs Miroslav Benes <mbenes@suse.cz> - 2016-01-20 11:00 +0100
csiph-web