Paul Brett created MESOS-2952:
---------------------------------

             Summary: Provide user namespaces for privileged access inside 
containers
                 Key: MESOS-2952
                 URL: https://issues.apache.org/jira/browse/MESOS-2952
             Project: Mesos
          Issue Type: Bug
            Reporter: Paul Brett
            Assignee: Paul Brett


User namespaces allow per-namespace mappings of user and group IDs. This means 
that a process's user and group IDs inside a user namespace can be different 
from its IDs outside of the namespace. Most notably, a process can have a 
nonzero user ID outside a namespace while at the same time having a user ID of 
zero inside the namespace; in other words, the process is unprivileged for 
operations outside the user namespace but has root privileges inside the 
namespace.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to