tree bf4b71c69e072bb6fdbe680674ab84bd79143e45
parent b032132c3c218f4a09e9499b3674299a752581c6
author Eric W. Biederman <ebiederm@xmission.com> 1469905129 -0500
committer Eric W. Biederman <ebiederm@xmission.com> 1470680338 -0500

userns: Add per user namespace sysctls.

Limit per userns sysctls to only be opened for write by a holder
of CAP_SYS_RESOURCE.

Add all of the necessary boilerplate for having per user namespace
sysctls.

Acked-by: Kees Cook <keescook@chromium.org>
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>