Quoting Reiner Herrmann ([email protected]): > I have hardlinked some files into an lxc container to share them with > someone. The files belong to uid 1000 on the host, but inside the > container there also exists a user with uid 1000. > Because they have the same uid, the user from the container is able > to modify the files of the host user. > > Is there a way to isolate the uids, so that host-uid would not have > the same rights as container-uid, even if they have the same numerical > value?
User namespaces will provide these. In fact, after the patchset which I've last posted to linux-kernel, the next task is to add uid mapping for file access. But it's a long way off. So in the meantime, you can use smack or selinux to provide isolation which will be completely independent of uids. -serge ------------------------------------------------------------------------------ Protect Your Site and Customers from Malware Attacks Learn about various malware tactics and how to avoid them. Understand malware threats, the impact they can have on your business, and how you can protect your company and customers by using code signing. http://p.sf.net/sfu/oracle-sfdevnl _______________________________________________ Lxc-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/lxc-users
