LXC: CVE-2017-5985: lxc-user-nic didn't verify network namespace ownership

[Tyler Hicks <tyhicks () canonical com>]

Jann Horn discovered that the lxc-user-nic program could be tricked into
operating on a network namespace over which the caller did not hold
privilege.

The behavior didn't follow what was documented in the lxc-user-nic(1)
man page:

 It ensures that the calling user is privileged over the network
 namespace to which the interface will be attached.

This issue is CVE-2017-5985.

https://lists.linuxcontainers.org/pipermail/lxc-users/2017-March/012925.html
https://launchpad.net/bugs/1654676
https://github.com/lxc/lxc/commit/16af238036a5464ae8f2420ed3af214f0de875f9

Tyler

Attachment: signature.asc
Description: OpenPGP digital signature