[Pkg-shadow-devel] [PATCH 1/1] man: newuid and newgid: point out that root must be allocated subuids

Serge Hallyn serge.hallyn at ubuntu.com
Mon Jun 9 22:46:33 UTC 2014


Users may otherwise be confused and think that because the kernel
does not restrict uid mappings to the root user (within his
current uid mappings), newuidmap will ignore /etc/subuid for the
root user.  It will not.

Reported-by: Philippe Grégoire <gregoirep at hotmail.com>
Signed-off-by: Serge Hallyn <serge.hallyn at ubuntu.com>
---
 man/newgidmap.1.xml | 2 ++
 man/newuidmap.1.xml | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/man/newgidmap.1.xml b/man/newgidmap.1.xml
index ad7a186..3c1955a 100644
--- a/man/newgidmap.1.xml
+++ b/man/newgidmap.1.xml
@@ -85,6 +85,8 @@
     <para>
       The <command>newgidmap</command> sets <filename>/proc/[pid]/gid_map</filename> based on it's
       command line arguments and the gids allowed in <filename>/etc/subgid</filename>.
+      Note that the root user is not exempted from the requirement for a valid
+      <filename>/etc/subgid</filename> entry.
     </para>
 
     <para>
diff --git a/man/newuidmap.1.xml b/man/newuidmap.1.xml
index 04bb14f..e07414f 100644
--- a/man/newuidmap.1.xml
+++ b/man/newuidmap.1.xml
@@ -82,6 +82,8 @@
     <para>
       The <command>newuidmap</command> sets <filename>/proc/[pid]/uid_map</filename> based on it's
       command line arguments and the uids allowed in <filename>/etc/subuid</filename>.
+      Note that the root user is not exempted from the requirement for a valid
+      <filename>/etc/subuid</filename> entry.
     </para>
 
     <para>
-- 
1.9.1




More information about the Pkg-shadow-devel mailing list