-
Notifications
You must be signed in to change notification settings - Fork 37
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
audit kernel module namespace security #25
Comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
We'd like to use XPMEM in environments with user namespaces, and perhaps other namespaces, enabled. A prerequisite for this is for the kernel module to be secure when used from inside namespaces.
For example, the UID used for access checking need to be the real host UID, not the in-namespace UID. But I think there are other things to check too.
I spoke with @jlowellwofford today and he told me he might be able to help with this.
The text was updated successfully, but these errors were encountered: