[Bug 120671] missing info about userns restrictions

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



https://bugzilla.kernel.org/show_bug.cgi?id=120671

--- Comment #2 from Michał Zegan <webczat_200@xxxxxxxxxxxxxx> ---
Well... For example, cap_sys_module does not work in user namespace, doesn't
it? cap_sys_mknod last i checked did not work in userns, but may be wrong.
About mounting filesystems, there is probably a whitelist. If I recall
correctly you are unable to mount any block based fs like ext4 inside of the
userns, like you have no permissions to mount most of them except tmpfs, proc
and such like. There may be other restrictions I am not aware of, but those are
some I know, unless I am wrong. It will help to clarify some things that are
just not present in that manpage.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.--
To unsubscribe from this list: send the line "unsubscribe linux-man" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Kernel Documentation]     [Netdev]     [Linux Ethernet Bridging]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux Admin]     [Samba]

  Powered by Linux