Skip to content

Create unique session key name for every container#582

Merged
mrunalp merged 1 commit intoopencontainers:masterfrom
stefanberger:new_session_keyring
Feb 26, 2016
Merged

Create unique session key name for every container#582
mrunalp merged 1 commit intoopencontainers:masterfrom
stefanberger:new_session_keyring

Conversation

@stefanberger
Copy link
Copy Markdown
Contributor

Create a unique session key name for every container. Use the pattern
_ses. with postfix being maximum 12 characters of the container's
Id.

This patch does not prevent containers from joining each other's session
keyring.

Signed-off-by: Stefan Berger stefanb@linux.vnet.ibm.com

@mikebrow
Copy link
Copy Markdown
Member

Curious... what is the significance of the 12 chars as the trunc point for the _ses.<container id truncated to 12 chars> name for the key name? Does it relate to 8.3 filenames? Cheers.

@stefanberger
Copy link
Copy Markdown
Contributor Author

@mikebrow DOS times are over. :-) The truncation relates to the ID of containers being used in docker where every container seems to be distinguishable by 12 hex-digits.

@mikebrow
Copy link
Copy Markdown
Member

Ok thx... 12 just seems random... But it makes sense to align with docker's chosen number ffff ffff ffff hmm. Cheers!

@cyphar
Copy link
Copy Markdown
Member

cyphar commented Feb 24, 2016

Since this is a security feature, I'd prefer that we used the same length as the container IDs (so you will get a collision with one or the other at about the same time).

Create a unique session key name for every container. Use the pattern
_ses.<postfix> with postfix being the container's Id.

This patch does not prevent containers from joining each other's session
keyring.

Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
@stefanberger
Copy link
Copy Markdown
Contributor Author

Updated to use full Id of container.

@crosbymichael
Copy link
Copy Markdown
Member

LGTM

1 similar comment
@mrunalp
Copy link
Copy Markdown
Contributor

mrunalp commented Feb 26, 2016

LGTM

mrunalp pushed a commit that referenced this pull request Feb 26, 2016
Create unique session key name for every container
@mrunalp mrunalp merged commit 4951f58 into opencontainers:master Feb 26, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants