[RFC PATCH 0/4] namespacefs: Proof-of-Concept [LWN.net]
viro-AT-zeniv.linux.org.uk, ebiederm-AT-xmission.com, rostedt-AT-goodmis.org, mingo-AT-redhat.com, hagen-AT-jauu.net, rppt-AT-kernel.org, James.Bottomley-AT-HansenPartnership.com, akpm-AT-linux-foundation.org, vvs-AT-virtuozzo.com, shakeelb-AT-google.com, christian.brauner-AT-ubuntu.com, mkoutny-AT-suse.com, "Yordan Karadzhov (VMware)" <y.karadz-AT-gmail.com> We introduce a simple read-only virtua
[RFC PATCH v3 0/8] Count rlimits in each user namespace [LWN.net]
Alexey Gladkov <legion-AT-kernel.org>, Andrew Morton <akpm-AT-linux-foundation.org>, Christian Brauner <christian.brauner-AT-ubuntu.com>, "Eric W . Biederman" <ebiederm-AT-xmission.com>, Jann Horn <jannh-AT-google.com>, Jens Axboe <axboe-AT-kernel.dk>, Kees Cook <keescook-AT-chromium.org>, Linus Torvalds <torvalds-AT-linux-foundation.org>, Oleg Nesterov <oleg-AT-redhat.com> Preface ------- These p
KRSI — the other BPF security module [LWN.net]
Did you know...?LWN.net is a subscriber-supported publication; we rely on subscribers to keep the entire operation going. Please help out by buying a subscription and keeping LWN on the net. One of the first uses of the BPF virtual machine outside of networking was to implement access-control policies for the seccomp() system call. Since then, though, the role of BPF in the security area has not c
A thorough introduction to eBPF [LWN.net]
This article brought to you by LWN subscribersSubscribers to LWN.net made this article — and everything that surrounds it — possible. If you appreciate our content, please buy a subscription and make the next set of articles possible. In his linux.conf.au 2017 talk [YouTube] on the eBPF in-kernel virtual machine, Brendan Gregg proclaimed that "super powers have finally come to Linux". Getting eBPF
Kernel runtime security instrumentation [LWN.net]
This article brought to you by LWN subscribersSubscribers to LWN.net made this article — and everything that surrounds it — possible. If you appreciate our content, please buy a subscription and make the next set of articles possible. Finding ways to make it easier and faster to mitigate an ongoing attack against a Linux system at runtime is part of the motivation behind the kernel runtime securit
Toward race-free process signaling [LWN.net]
This article brought to you by LWN subscribersSubscribers to LWN.net made this article — and everything that surrounds it — possible. If you appreciate our content, please buy a subscription and make the next set of articles possible. Signals have existed in Unix systems for years, despite the general consensus that they are an example of a bad design. Extensions and new ways of using signals pop
shiftfs: uid/gid shifting filesystem (s_user_ns version) [LWN.net]
Djalal Harouni <tixxdz-AT-gmail.com>, Chris Mason <clm-AT-fb.com>, Theodore Tso <tytso-AT-mit.edu>, Josh Triplett <josh-AT-joshtriplett.org>, "Eric W. Biederman" <ebiederm-AT-xmission.com>, Andy Lutomirski <luto-AT-kernel.org>, Seth Forshee <seth.forshee-AT-canonical.com>, linux-fsdevel-AT-vger.kernel.org, linux-kernel-AT-vger.kernel.org, linux-security-module-AT-vger.kernel.org, Dongsu Park <dong
shiftfs: uid/gid shifting filesystem [LWN.net]
This is currently an RFC because the patch applies to Linus head, but needs altering for the vfs tree, so I'll respin and resend after the merge window closes. My use case for this is that I run a lot of unprivileged architectural emulation containers on my system using user namespaces. Details here: http://blog.hansenpartnership.com/unprivileged-build-cont... They're mostly for building non-x86 s
Namespaces in operation, part 1: namespaces overview [LWN.net]
Namespaces in operation, part 1: namespaces overview This article brought to you by LWN subscribersSubscribers to LWN.net made this article — and everything that surrounds it — possible. If you appreciate our content, please buy a subscription and make the next set of articles possible. The Linux 3.8 merge window saw the acceptance of Eric Biederman's sizeable series of user namespace and related
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
[PATCH v2 1/5] cgroup: introduce cgroup.kill [LWN.net]
Preparing for user-space checkpoint/restore [LWN.net]