Hi Serge, On Fri, Mar 15, 2013 at 4:38 PM, Serge Hallyn <serge.hal...@ubuntu.com> wrote: > Hi, > > you mention that after creating a new user namespace you at first have > all capabilities in the new ns. You don't explicitly mention (or I > missed it - I did see the mention of securebits) that if you want to > keep those capabilities after doing an exec, you need to first have > something mapped to uid 0 in the userns, and do setuid(0).
Good point. I'll add something on that. > You might not want to list manpages from other projects, Actually, not a problem. Many of the pages in my set already do this. > but Eric's > shadow patches introduce some good new manpages as well. Those aren't yet > accepted upstream, but if/when they are then mention at least of > subuid(5), subgid(5), and newuidmap(1) and newgidmap(1) might be good. I'll add those. Cheers, Michael -- Michael Kerrisk Linux man-pages maintainer; http://www.kernel.org/doc/man-pages/ Author of "The Linux Programming Interface"; http://man7.org/tlpi/ -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
