Public bug reported:
When creating a new container, and creating a new user within the
container, if the new user has the same id and gid as a global user, the
processes created within the container are owned by that global user.
This causes unexpected ownership of container processes by users of the
global zone, which shouldn't happen. Processes spawned from a container
zone should be isolated from the global zone users.
Ubuntu Release:
root@lxc:~# lsb_release -rd
Description: Ubuntu Xenial Xerus (development branch)
Release: 16.04
Package Version:
root@lxc:~# apt-cache policy lxc
lxc:
Installed: 2.0.0~rc15-0ubuntu1
Candidate: 2.0.0-0ubuntu1
Version table:
2.0.0-0ubuntu1 500
500 http://us.archive.ubuntu.com/ubuntu xenial/main amd64 Packages
500 http://us.archive.ubuntu.com/ubuntu xenial/main i386 Packages
*** 2.0.0~rc15-0ubuntu1 100
100 /var/lib/dpkg/status
** Affects: lxc (Ubuntu)
Importance: Undecided
Status: New
** Tags: xenial
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1569462
Title:
Isolation of container user and global user needed
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1569462/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
