{"published":"2016-01-15 20:52:29","type":"rich","blog_url":"https://tenforward.hatenablog.com/","provider_name":"Hatena Blog","height":"190","title":" [Linux][Kernel][Security] User Namespace \u3068 Overlayfs \u3068 CVE-2015-8660","author_url":"https://blog.hatena.ne.jp/defiant/","provider_url":"https://hatena.blog","url":"https://tenforward.hatenablog.com/entry/20160115/1452858749","version":"1.0","width":"100%","image_url":null,"author_name":"defiant","categories":[],"html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Ftenforward.hatenablog.com%2Fentry%2F20160115%2F1452858749\" title=\" [Linux][Kernel][Security] User Namespace \u3068 Overlayfs \u3068 CVE-2015-8660 - TenForward\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","blog_title":"TenForward","description":"\u5358\u306a\u308b\u30e1\u30e2\u3067\u3059\u3002aufs-users ML \u306b\u6d41\u308c\u305f\u3001Overlayfs \u3068 User Namespace(userns) \u3092\u4f75\u305b\u3066\u4f7f\u3063\u305f\u6642\u306e\u8106\u5f31\u6027\u306e\u304a\u8a71\uff1a Re: try reproducing this problem? \u8106\u5f31\u6027\u306e\u5185\u5bb9\u306f UserNamespaceOverlayfsSetuidWriteExec \u3053\u308c\u306b\u95a2\u9023\u3059\u308b\u8106\u5f31\u6027\u3068\u3057\u3066 CVE-2015-8660 \u304c\u3042\u308b\u3088\u3046\u3067\u3001\u3053\u308c\u306f\u3059\u3067\u306b\u4fee\u6b63\u6e08\u307f\u3067\u3001\u4e0a\u8a18\u306b\u66f8\u304b\u308c\u305f\u8106\u5f31\u6027\u3082\u3053\u308c\u3067\u5f71\u97ff\u306a\u304f\u306a\u308b\u3089\u3057\u3044\u3002aufs \u3067 userns \u306f aufs \u3092\u4f7f\u3063\u305f\u4e00\u822c\u30e6\u30fc\u30b6\u6a29\u9650\u3067\u8d77\u52d5\u3059\u308b\u30b3\u30f3\u30c6\u30ca - TenForward\u306e\u65e5\u8a18 \u306e\u3042\u305f\u308a\u306e\u8a71\u3067\u3001\u666e\u6bb5\u304b\u3089\u2026"}