{"action":"created","issue":{"url":"https://api.github.com/repos/systemd/systemd/issues/1822","labels_url":"https://api.github.com/repos/systemd/systemd/issues/1822/labels{/name}","comments_url":"https://api.github.com/repos/systemd/systemd/issues/1822/comments","events_url":"https://api.github.com/repos/systemd/systemd/issues/1822/events","html_url":"https://github.com/systemd/systemd/issues/1822","id":116010160,"number":1822,"title":"journal: be stricter when accepting fds passed in, refuse non-tmpfs/non-memfd fs, as well as fds from fs with MS_MAND set, and open the fds with O_NONBLOCK","user":{"login":"xilun","id":6464553,"avatar_url":"https://avatars.githubusercontent.com/u/6464553?v=3","gravatar_id":"","url":"https://api.github.com/users/xilun","html_url":"https://github.com/xilun","followers_url":"https://api.github.com/users/xilun/followers","following_url":"https://api.github.com/users/xilun/following{/other_user}","gists_url":"https://api.github.com/users/xilun/gists{/gist_id}","starred_url":"https://api.github.com/users/xilun/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/xilun/subscriptions","organizations_url":"https://api.github.com/users/xilun/orgs","repos_url":"https://api.github.com/users/xilun/repos","events_url":"https://api.github.com/users/xilun/events{/privacy}","received_events_url":"https://api.github.com/users/xilun/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/systemd/systemd/labels/journal","name":"journal","color":"d4c5f9"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-11-10T02:10:07Z","updated_at":"2015-11-10T14:11:45Z","closed_at":null,"body":""},"comment":{"url":"https://api.github.com/repos/systemd/systemd/issues/comments/155431114","html_url":"https://github.com/systemd/systemd/issues/1822#issuecomment-155431114","issue_url":"https://api.github.com/repos/systemd/systemd/issues/1822","id":155431114,"user":{"login":"xilun","id":6464553,"avatar_url":"https://avatars.githubusercontent.com/u/6464553?v=3","gravatar_id":"","url":"https://api.github.com/users/xilun","html_url":"https://github.com/xilun","followers_url":"https://api.github.com/users/xilun/followers","following_url":"https://api.github.com/users/xilun/following{/other_user}","gists_url":"https://api.github.com/users/xilun/gists{/gist_id}","starred_url":"https://api.github.com/users/xilun/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/xilun/subscriptions","organizations_url":"https://api.github.com/users/xilun/orgs","repos_url":"https://api.github.com/users/xilun/repos","events_url":"https://api.github.com/users/xilun/events{/privacy}","received_events_url":"https://api.github.com/users/xilun/received_events","type":"User","site_admin":false},"created_at":"2015-11-10T14:11:45Z","updated_at":"2015-11-10T14:11:45Z","body":"So what would you advice exactly to change in the kernel (or anywhere else) ? Do you think it would be interesting to be more secure about this class of problems by making /proc/self/fd/<n> symlinks aware of fd crossing fs namespace boundaries ? Do you know if /proc/self/fd/<n> was intented for security checks in the first time ? Any other idea ?\r\nWhat for the affected distributions ? Should they disable CLONE_NEWUSER in the meantime, or would the supplementary RFE you propose be enough ?\r\n"}}