[Pkg-shadow-devel] [test] newuidmap/newgidmap]

[Eric W. Biederman]

Serge Hallyn <serge.hallyn at ubuntu.com> writes:

> Quoting Philippe Grégoire (gregoirep at hotmail.com):
>> After all, what I asked for was for a precision in
>> newuidmap(1) stating that it is not meant to be used by privileged users and advise to fallback on the kernel.
>
> Would something like the following in the newuidmap manpage
> help in your opinion?
>
> "The newuidmap sets /proc/[pid]/uid_map based on it's command line arguments
> and the uids allowed in /etc/subuid.  The root user is not exempted from the
> requirement for a valid /etc/subuid entry."

That sounds like a good addition to the man page to me.

Eric