[Pkg-shadow-devel] [PATCH 1/1] man: newuid and newgid: point out that root must be allocated subuids
Serge Hallyn
serge.hallyn at ubuntu.com
Mon Jun 9 22:46:33 UTC 2014
Users may otherwise be confused and think that because the kernel
does not restrict uid mappings to the root user (within his
current uid mappings), newuidmap will ignore /etc/subuid for the
root user. It will not.
Reported-by: Philippe Grégoire <gregoirep at hotmail.com>
Signed-off-by: Serge Hallyn <serge.hallyn at ubuntu.com>
---
man/newgidmap.1.xml | 2 ++
man/newuidmap.1.xml | 2 ++
2 files changed, 4 insertions(+)
diff --git a/man/newgidmap.1.xml b/man/newgidmap.1.xml
index ad7a186..3c1955a 100644
--- a/man/newgidmap.1.xml
+++ b/man/newgidmap.1.xml
@@ -85,6 +85,8 @@
<para>
The <command>newgidmap</command> sets <filename>/proc/[pid]/gid_map</filename> based on it's
command line arguments and the gids allowed in <filename>/etc/subgid</filename>.
+ Note that the root user is not exempted from the requirement for a valid
+ <filename>/etc/subgid</filename> entry.
</para>
<para>
diff --git a/man/newuidmap.1.xml b/man/newuidmap.1.xml
index 04bb14f..e07414f 100644
--- a/man/newuidmap.1.xml
+++ b/man/newuidmap.1.xml
@@ -82,6 +82,8 @@
<para>
The <command>newuidmap</command> sets <filename>/proc/[pid]/uid_map</filename> based on it's
command line arguments and the uids allowed in <filename>/etc/subuid</filename>.
+ Note that the root user is not exempted from the requirement for a valid
+ <filename>/etc/subuid</filename> entry.
</para>
<para>
--
1.9.1
More information about the Pkg-shadow-devel
mailing list