Linus Torvalds 2c3de1c2d7 Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace ... Pull userns fixes from Eric W Biederman: "The bulk of the changes are fixing the worst consequences of the user namespace design oversight in not considering what happens when one namespace starts off as a clone of another namespace, as happens with the mount namespace. The rest of the changes are just plain bug fixes. Many thanks to Andy Lutomirski for pointing out many of these issues." * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace: userns: Restrict when proc and sysfs can be mounted ipc: Restrict mounting the mqueue filesystem vfs: Carefully propogate mounts across user namespaces vfs: Add a mount flag to lock read only bind mounts userns: Don't allow creation if the user is chrooted yama: Better permission check for ptraceme pid: Handle the exit of a multi-threaded init. scm: Require CAP_SYS_ADMIN over the current pidns to spoof pids.		2013-03-28 13:43:46 -07:00
..
apparmor	new helper: file_inode(file)	2013-02-22 23:31:31 -05:00
integrity	hlist: drop the node parameter from iterators	2013-02-27 19:10:24 -08:00
keys	Fix: compat_rw_copy_check_uvector() misuse in aio, readv, writev, and security keys	2013-03-12 11:05:45 -07:00
selinux	selinux: use GFP_ATOMIC under spin_lock	2013-03-19 00:33:09 +11:00
smack	new helper: file_inode(file)	2013-02-22 23:31:31 -05:00
tomoyo	new helper: file_inode(file)	2013-02-22 23:31:31 -05:00
yama	yama: Better permission check for ptraceme	2013-03-26 13:17:58 -07:00
capability.c	tun: fix LSM/SELinux labeling of tun/tap devices	2013-01-14 18:16:59 -05:00
commoncap.c	kill f_vfsmnt	2013-02-26 02:46:10 -05:00
device_cgroup.c	device_cgroup: don't grab mutex in rcu callback	2013-02-21 17:22:15 -08:00
inode.c
Kconfig
lsm_audit.c
Makefile
min_addr.c
security.c	tun: fix LSM/SELinux labeling of tun/tap devices	2013-01-14 18:16:59 -05:00