Anatomy of a user namespaces vulnerability

If you enjoy thinking about security, please look at this stuff. It's really neat, but there is certainly lots of room for bugs.

(I'll publicly post at least two more of varying severities once there are patches.)