[lxc-devel] [lxc/lxc] 16af23: CVE-2017-5985: Ensure target netns is caller-owned
noreply at github.com
Thu Mar 9 16:35:27 UTC 2017
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-03-09 (Thu, 09 Mar 2017)
CVE-2017-5985: Ensure target netns is caller-owned
Before this commit, lxc-user-nic could potentially have been tricked into
operating on a network namespace over which the caller did not hold privilege.
This commit ensures that the caller is privileged over the network namespace by
temporarily dropping privilege.
Reported-by: Jann Horn <jannh at google.com>
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
More information about the lxc-devel