[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [PATCH 2/3] user_namespaces.7: Document pitfall with negative permis
|
From: |
Alejandro Colomar |
|
Subject: |
Re: [PATCH 2/3] user_namespaces.7: Document pitfall with negative permissions and user namespaces |
|
Date: |
Tue, 29 Aug 2023 23:40:34 +0200 |
|
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.13.1 |
On 2023-08-29 23:39, Richard Weinberger wrote:
> ----- Ursprüngliche Mail -----
>> Von: "Alejandro Colomar" <alx@kernel.org>
>> $ unshare ‐S 0 ‐G 0 ‐‐map‐users=100000,0,65536 ‐‐map‐groups=100000,0,65536 id
>> unshare: failed to execute ‐S: No such file or directory
>
> Well, maybe your unshare tool is too old.
> AFAIK it uses newuidmap only in recent versions.
I'm on Debian Sid. That's quite unlikely :p
(Although Debian Sid still runs make-4.3, so it wouldn't be crazy).
>
> You can achieve the very same als using podman in rootless mode.
> e.g.
> podman run -it -v /scratch:/scratch/ bash -c "cat /scratch/games/game.txt"
>
> Thanks,
> //richard
--
<http://www.alejandro-colomar.es/>
GPG key fingerprint: A9348594CE31283A826FBDD8D57633D441E25BB5
OpenPGP_signature
Description: OpenPGP digital signature
[PATCH 3/3] man: Document pitfall with negative permissions and user namespaces, Richard Weinberger, 2023/08/29