tree 069609531cff66b163ac17f29a8a1ce957d020ef
parent a937536b868b8369b98967929045f1df54234323
author Eric W. Biederman <ebiederm@xmission.com> 1363334613 -0700
committer Eric W. Biederman <ebiederm@xmission.com> 1363565776 -0700

scm: Require CAP_SYS_ADMIN over the current pidns to spoof pids.

Don't allow spoofing pids over unix domain sockets in the corner
cases where a user has created a user namespace but has not yet
created a pid namespace.

Cc: stable@vger.kernel.org
Reported-by: Andy Lutomirski <luto@amacapital.net>
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>