diff options
Diffstat (limited to 'kernel/user_namespace.c')
| -rw-r--r-- | kernel/user_namespace.c | 4 | 
1 files changed, 4 insertions, 0 deletions
| diff --git a/kernel/user_namespace.c b/kernel/user_namespace.c index 8b650837083..b14f4d34204 100644 --- a/kernel/user_namespace.c +++ b/kernel/user_namespace.c @@ -21,6 +21,7 @@  #include <linux/uaccess.h>  #include <linux/ctype.h>  #include <linux/projid.h> +#include <linux/fs_struct.h>  static struct kmem_cache *user_ns_cachep __read_mostly; @@ -837,6 +838,9 @@ static int userns_install(struct nsproxy *nsproxy, void *ns)  	if (atomic_read(¤t->mm->mm_users) > 1)  		return -EINVAL; +	if (current->fs->users != 1) +		return -EINVAL; +  	if (!ns_capable(user_ns, CAP_SYS_ADMIN))  		return -EPERM; |