fix(driver): export euid, egid and loginuid from init user ns#3000
Conversation
The kernel module currently exports euids, egids and loginuids as seen from the task's user namespace: this is inconsistent with the (expected) behaviour implemented by the modern eBPF probe, that exports the ones seen from the init user namespace. Make the kernel module consistent by fixing its code to export the ones seen from the init user namespace. Signed-off-by: Leonardo Di Giovanna <leonardodigiovanna1@gmail.com>
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: ekoops, gnosek, irozzo-1A The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
|
/hold |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## master #3000 +/- ##
=======================================
Coverage 75.75% 75.75%
=======================================
Files 299 299
Lines 33131 33131
Branches 5159 5159
=======================================
Hits 25098 25098
Misses 8033 8033
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
Perf diff from master - unit testsHeap diff from master - unit testsHeap diff from master - scap fileBenchmarks diff from master |
X64 kernel testing matrix
ARM64 kernel testing matrix
|
|
CI is green. |
What type of PR is this?
/kind bug
Any specific area of the project related to this PR?
/area drivers
/area driver-kmod
Does this PR require a change in the driver versions?
/version driver-SCHEMA-version-patch
What this PR does / why we need it:
The kernel module currently exports euids, egids and loginuids as seen from the task's user namespace: this is inconsistent with the (expected) behaviour implemented by the modern eBPF probe, that exports the ones seen from the init user namespace. This PR makes the kernel module consistent by fixing its code to export the ones seen from the init user namespace.
Which issue(s) this PR fixes:
Fixes #
Special notes for your reviewer:
/milestone next-driver
Does this PR introduce a user-facing change?: