Messages in this thread | | | From | Dmitry Torokhov <> | Date | Thu, 28 Feb 2019 11:27:38 -0800 | Subject | Allowing mapping supplemental groups in user namespace? |
| |
Hi Eric,
Currently, unless caller has CAP_SETGID in parent namespace, we can only map effective group id in the new user namespace. Would it be possible to relax this rule to also allow mapping of supplemental groups (1:1) of the caller?
Thanks.
-- Dmitry
| |