Eric W. Biederman 21245b8635 exec: Ensure mm->user_ns contains the execed files ... commit f84df2a6f2 upstream. When the user namespace support was merged the need to prevent ptrace from revealing the contents of an unreadable executable was overlooked. Correct this oversight by ensuring that the executed file or files are in mm->user_ns, by adjusting mm->user_ns. Use the new function privileged_wrt_inode_uidgid to see if the executable is a member of the user namespace, and as such if having CAP_SYS_PTRACE in the user namespace should allow tracing the executable. If not update mm->user_ns to the parent user namespace until an appropriate parent is found. Reported-by: Jann Horn <jann@thejh.net> Fixes: 9e4a36ece6 ("userns: Fail exec for suid and sgid binaries with ids outside our user namespace.") Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2017-01-06 10:40:12 +01:00
..
acpi	Merge branches 'acpica-fixes', 'acpi-cppc-fixes' and 'acpi-tools-fixes'	2016-11-18 21:34:42 +01:00
asm-generic	Revert "default exported asm symbols to zero"	2016-12-07 08:39:00 -08:00
clocksource
crypto	crypto: drbg - prevent invalid SG mappings	2016-11-30 19:46:44 +08:00
drm	drm: Don't force all planes to be added to the state due to zpos	2016-10-26 18:48:05 +02:00
dt-bindings	Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/rzhang/linux	2016-10-12 11:05:23 -07:00
keys
kvm
linux	exec: Ensure mm->user_ns contains the execed files	2017-01-06 10:40:12 +01:00
math-emu
media	Linux 4.8	2016-10-05 16:43:53 -03:00
memory
misc
net	Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf	2016-12-01 11:04:41 -05:00
pcmcia
ras
rdma	Merge of primary rdma-core code for 4.9	2016-10-09 17:04:33 -07:00
rxrpc
scsi
soc	powerpc updates for 4.9 #2	2016-10-14 11:07:42 -07:00
sound	ASoC: Updates for v4.9	2016-09-30 18:40:40 +02:00
target	target: Make EXTENDED_COPY 0xe4 failure return COPY TARGET DEVICE NOT REACHABLE	2016-10-19 21:22:32 -07:00
trace	Merge branch 'for-4.9' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup	2016-10-14 12:18:50 -07:00
uapi	can: raw: raw_setsockopt: limit number of can_filter that can be set	2016-12-07 10:45:57 +01:00
video	fbdev changes for 4.9	2016-10-12 11:01:37 -07:00
xen	xen: features and fixes for 4.9-rc0	2016-10-06 11:19:10 -07:00
Kbuild