tree 094c81d9e369d81713ea0870295acc9586cc8980
parent 3442b8e7e9a1b9245f21e983f5a020ff7aee0c02
author Thomas Garnier <thgarnie@chromium.org> 1576540243 -0800
committer Vaibhav Rustagi <vaibhavrustagi@google.com> 1582563880 +0000

security: track kubectl/docker exec session using pid_namespace field

Add a field to the pid_namespace to check if a process is linked to the
container creation or a dedicated session kubectl/docker exec (also
used for liveness probes).

BUG=b:148390640
TEST=Ran all internal testing.
SOURCE=KTD

Signed-off-by: Thomas Garnier <thgarnie@chromium.org>
Change-Id: Id8ec642d42a382be586135c6344af200b68b6d5d
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/third_party/lakitu-kernel/+/2062510
Commit-Queue: Vaibhav Rustagi <vaibhavrustagi@google.com>
Reviewed-by: Peter Martincic <martincic@google.com>
Reviewed-by: Vaibhav Rustagi <vaibhavrustagi@google.com>
Tested-by: Vaibhav Rustagi <vaibhavrustagi@google.com>