[lxc-devel] [lxc/lxc] f8aa4b: conf: use minimal {g,u}id map

GitHub noreply at github.com
Thu Jun 1 22:12:59 UTC 2017


  Branch: refs/heads/master
  Home:   https://github.com/lxc/lxc
  Commit: f8aa4bf3089e5c1e74f913bc057725128181c6ee
      https://github.com/lxc/lxc/commit/f8aa4bf3089e5c1e74f913bc057725128181c6ee
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2017-06-01 (Thu, 01 Jun 2017)

  Changed paths:
    M src/lxc/conf.c

  Log Message:
  -----------
  conf: use minimal {g,u}id map

Afaict, userns_exec_1() is only used to operate based on privileges for the
user's own {g,u}id on the host and for the container root's unmapped {g,u}id.
This means we require only to establish a mapping from:
- the container root {g,u}id as seen from the host -> user's host {g,u}id
- the container root -> some sub{g,u}id

The former we add, if the user did not specifiy a mapping. The latter we
retrieve from the ontainer's configured {g,u}id mappings.

Closes #1598.

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: ca3592eb15de19243d293442a8b0c8f75fe03e9d
      https://github.com/lxc/lxc/commit/ca3592eb15de19243d293442a8b0c8f75fe03e9d
  Author: Serge Hallyn <serge at hallyn.com>
  Date:   2017-06-01 (Thu, 01 Jun 2017)

  Changed paths:
    M src/lxc/conf.c

  Log Message:
  -----------
  Merge pull request #1599 from brauner/2017-05-30/use_minimal_idmap_set

conf: use minimal {g,u}id map


Compare: https://github.com/lxc/lxc/compare/493c62361945...ca3592eb15de


More information about the lxc-devel mailing list