Re: For review (v2): user_namespaces(7) man page

2013-04-29 Thread Andy Lutomirski
On Thu, Apr 25, 2013 at 10:48 PM, richard -rw- weinberger wrote: > On Fri, Apr 26, 2013 at 2:54 AM, Eric W. Biederman > wrote: >> richard -rw- weinberger writes: >> >>> On Wed, Mar 27, 2013 at 10:26 PM, Michael Kerrisk (man-pages) >>> wrote: Inside the user namespace, the shell has

Re: For review (v2): user_namespaces(7) man page

2013-04-29 Thread Andy Lutomirski
On Thu, Apr 25, 2013 at 10:48 PM, richard -rw- weinberger richard.weinber...@gmail.com wrote: On Fri, Apr 26, 2013 at 2:54 AM, Eric W. Biederman ebied...@xmission.com wrote: richard -rw- weinberger richard.weinber...@gmail.com writes: On Wed, Mar 27, 2013 at 10:26 PM, Michael Kerrisk

Re: For review (v2): user_namespaces(7) man page

2013-04-25 Thread richard -rw- weinberger
On Fri, Apr 26, 2013 at 2:54 AM, Eric W. Biederman wrote: > richard -rw- weinberger writes: > >> On Wed, Mar 27, 2013 at 10:26 PM, Michael Kerrisk (man-pages) >> wrote: >>>Inside the user namespace, the shell has user and group ID 0, >>>and a full set of permitted and

Re: For review (v2): user_namespaces(7) man page

2013-04-25 Thread Eric W. Biederman
richard -rw- weinberger writes: > On Wed, Mar 27, 2013 at 10:26 PM, Michael Kerrisk (man-pages) > wrote: >>Inside the user namespace, the shell has user and group ID 0, >>and a full set of permitted and effective capabilities: >> >>bash$ cat /proc/$$/status | egrep

Re: For review (v2): user_namespaces(7) man page

2013-04-25 Thread richard -rw- weinberger
On Wed, Mar 27, 2013 at 10:26 PM, Michael Kerrisk (man-pages) wrote: >Inside the user namespace, the shell has user and group ID 0, >and a full set of permitted and effective capabilities: > >bash$ cat /proc/$$/status | egrep '^[UG]id' >Uid: 000

Re: For review (v2): user_namespaces(7) man page

2013-04-25 Thread richard -rw- weinberger
On Wed, Mar 27, 2013 at 10:26 PM, Michael Kerrisk (man-pages) mtk.manpa...@gmail.com wrote: Inside the user namespace, the shell has user and group ID 0, and a full set of permitted and effective capabilities: bash$ cat /proc/$$/status | egrep '^[UG]id'

Re: For review (v2): user_namespaces(7) man page

2013-04-25 Thread Eric W. Biederman
richard -rw- weinberger richard.weinber...@gmail.com writes: On Wed, Mar 27, 2013 at 10:26 PM, Michael Kerrisk (man-pages) mtk.manpa...@gmail.com wrote: Inside the user namespace, the shell has user and group ID 0, and a full set of permitted and effective capabilities:

Re: For review (v2): user_namespaces(7) man page

2013-04-25 Thread richard -rw- weinberger
On Fri, Apr 26, 2013 at 2:54 AM, Eric W. Biederman ebied...@xmission.com wrote: richard -rw- weinberger richard.weinber...@gmail.com writes: On Wed, Mar 27, 2013 at 10:26 PM, Michael Kerrisk (man-pages) mtk.manpa...@gmail.com wrote: Inside the user namespace, the shell has user and

Re: For review (v2): user_namespaces(7) man page

2013-03-28 Thread Eric W. Biederman
Over the last little while I have been working to correct a design oversight in user namespaces, that probably needs to be documented somewhere, and the fixes for the worst of the oversight have been merged. The problem was I forgot to consider what when there are shared resources and root uses

Re: For review (v2): user_namespaces(7) man page

2013-03-28 Thread Eric W. Biederman
Over the last little while I have been working to correct a design oversight in user namespaces, that probably needs to be documented somewhere, and the fixes for the worst of the oversight have been merged. The problem was I forgot to consider what when there are shared resources and root uses