Re: dropping capabilities in user namespace

Aditya Kali writes: > On Wed, Apr 23, 2014 at 2:17 AM, Eric W. Biederman > wrote: >> Aditya Kali writes: >> >>> Hi all, >>> >>> I am trying to understand the behavior of how we can drop capabilities >>> inside user namespace. i.e., I want to start a process inside user >>> namespace with its ef

Re: dropping capabilities in user namespace

On Wed, Apr 23, 2014 at 2:17 AM, Eric W. Biederman wrote: > Aditya Kali writes: > >> Hi all, >> >> I am trying to understand the behavior of how we can drop capabilities >> inside user namespace. i.e., I want to start a process inside user >> namespace with its effective and permitted capability

Re: dropping capabilities in user namespace

Aditya Kali writes: > Hi all, > > I am trying to understand the behavior of how we can drop capabilities > inside user namespace. i.e., I want to start a process inside user > namespace with its effective and permitted capability sets cleared. Please note to start with that at the point you are

dropping capabilities in user namespace

Hi all, I am trying to understand the behavior of how we can drop capabilities inside user namespace. i.e., I want to start a process inside user namespace with its effective and permitted capability sets cleared. A typical way in which a root (uid=0) process can drop its privileges is: prctl(PR