CVE-2014-4014: Linux kernel user namespace bug

[Andy Lutomirski <luto () amacapital net>]

The internal function inode_capable was used inappropriately.
Depending on configuration, this may be usable to escalate privileges.
A cursory inspection of my Fedora box suggests that it is not
vulnerable to the obvious way to exploit this bug.

The fix should appear in Linus' -master shortly, and it's tagged for
stable.  In the mean time, I've attached it here.

I'll follow up in a day or two with a description of the actual bug,
or one of you can try to beat me to it.

--Andy

Attachment: 0001-fs-userns-Change-inode_capable-to-capable_wrt_inode_.patch
Description: