Fooi, it looks like all users of cred_alloc_blank() may need to be audited wrt commit 47a150edc2ae734c0f4bf50aa19499e23b9a46f8. Does this fix the bug you're seeing? From: Serge E. Hallyn <serge.hallyn@canonical.com> Date: Wed, 25 May 2011 15:41:23 +0100 Subject: [PATCH 1/1] Set cred->user_ns in key_replace_session_keyring Since this cred was not created with copy_creds(), it needs to get initialized. Signed-off-by: Serge E. Hallyn <serge.hallyn@canonical.com> --- security/keys/process_keys.c | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) diff --git a/security/keys/process_keys.c b/security/keys/process_keys.c index 6c0480d..92a3a5d 100644 --- a/security/keys/process_keys.c +++ b/security/keys/process_keys.c @@ -847,6 +847,7 @@ void key_replace_session_keyring(void) new-> sgid = old-> sgid; new->fsgid = old->fsgid; new->user = get_uid(old->user); + new->user_ns = new->user->user_ns; new->group_info = get_group_info(old->group_info); new->securebits = old->securebits; -- 1.7.0.4