Hi Serge, On Fri, Mar 15, 2013 at 4:38 PM, Serge Hallyn <serge.hallyn@xxxxxxxxxx> wrote: > Hi, > > you mention that after creating a new user namespace you at first have > all capabilities in the new ns. You don't explicitly mention (or I > missed it - I did see the mention of securebits) that if you want to > keep those capabilities after doing an exec, you need to first have > something mapped to uid 0 in the userns, and do setuid(0). Good point. I'll add something on that. > You might not want to list manpages from other projects, Actually, not a problem. Many of the pages in my set already do this. > but Eric's > shadow patches introduce some good new manpages as well. Those aren't yet > accepted upstream, but if/when they are then mention at least of > subuid(5), subgid(5), and newuidmap(1) and newgidmap(1) might be good. I'll add those. Cheers, Michael -- Michael Kerrisk Linux man-pages maintainer; http://www.kernel.org/doc/man-pages/ Author of "The Linux Programming Interface"; http://man7.org/tlpi/ _______________________________________________ Containers mailing list Containers@xxxxxxxxxxxxxxxxxxxxxxxxxx https://lists.linuxfoundation.org/mailman/listinfo/containers
