[lxc-devel] capset fails with userns

Stephan Sachse ste.sachse at gmail.com
Wed Feb 26 13:56:17 UTC 2014


for me there is no valid reason why a container is not allowed to set
file capabilities.

and here is the patch (send to Eric W. Biederman <ebiederm at xmission.com>)

works for me

/stephan

-- 
Software is like sex, it's better when it's free!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-capability-allow-setxattr-within-userns.patch
Type: text/x-patch
Size: 1730 bytes
Desc: not available
URL: <http://lists.linuxcontainers.org/pipermail/lxc-devel/attachments/20140226/de1a3985/attachment.bin>


More information about the lxc-devel mailing list