Messages in this thread | | | Subject | Re: Issue with clone() and CLONE_NEWUSER as unprivileged user | From | Marcel Holtmann <> | Date | Thu, 21 Aug 2014 17:26:51 -0500 |
| |
Hi Andy,
>> I am trying to use clone() and CLONE_NEWUSER for creating a new user namespace as an unprivileged user. I always get an operation not permitted error. However when I used fork() + unshare() as unprivileged user, I can create the new user namespace just fine. >> >> Is there something obvious that I am missing? My understand is that CLONE_NEWUSER should not require any special capabilities. I tried the sample code from the manpage and also from LWN.net, but both give me the same error. > > It works for me on 3.16 and 3.15 but not on 3.15.8-200.fc20.x86_64. I'm > a bit confused. What kernel are you using?
I am running 3.15.6-200.fc20.x86_64 actually. What confused me is that fork() + unshare() works fine, but clone() doesn't.
Regards
Marcel
| |