The following pull request was submitted through Github. It can be accessed and reviewed at: https://github.com/lxc/lxc/pull/1594
This e-mail was sent by the LXC bot, direct replies will not reach the author unless they happen to be subscribed to this list. === Description (from pull-request) === Suggested-by: Serge Hallyn <[email protected]> Signed-off-by: Christian Brauner <[email protected]>
From ac8f64dc73d41b5476dffbdfcb38552d6d15598d Mon Sep 17 00:00:00 2001 From: Christian Brauner <[email protected]> Date: Mon, 29 May 2017 06:02:24 +0200 Subject: [PATCH] README: reword id mapping restrictions when unpriv Suggested-by: Serge Hallyn <[email protected]> Signed-off-by: Christian Brauner <[email protected]> --- README.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index e03e34799..7dfb8a34c 100644 --- a/README.md +++ b/README.md @@ -70,10 +70,10 @@ quite restricted. Just to highlight the two most common problems: inside of the container will not be able to boot up correctly. 2. User Namespaces: As outlined above, user namespaces are a big security - enhancement. However, users which are unprivileged on the host will only be - able to establish a mapping for their own UID if they do not rely on - privileged helpers. A standard POSIX system however, requires 65536 UIDs and - GIDs to be available to guarantee full functionality. + enhancement. However, without relying on privileged helpers users who are + unprivileged on the host are only permitted to map their own UID into + a container. A standard POSIX system however, requires 65536 UIDs and GIDs + to be available to guarantee full functionality. ## Configuration
_______________________________________________ lxc-devel mailing list [email protected] http://lists.linuxcontainers.org/listinfo/lxc-devel
