| commit | 1bed23943f4b03695c0aa49cc8a25405c30834df | [log] [tgz] |
|---|---|---|
| author | Serge Hallyn <serge.hallyn@ubuntu.com> | Tue Mar 01 00:09:35 2016 +0000 |
| committer | Serge Hallyn <serge.hallyn@ubuntu.com> | Fri Apr 22 11:10:17 2016 -0500 |
| tree | bd7b080e554715c7e06c64ccb1853e3022c3074b | |
| parent | 5f44abd041c5f3be76d57579ab254d78e601315b [diff] |
simplified security.nscapability xattr This can only be set by root in his own namespace, and will only be respected by namespaces with that same root kuid mapped as root, or namespaces descended from it. This allows a simple setxattr to work, allows tar/untar to work, and allows us to tar in one namespace and untar in another while preserving the capability, without risking leaking privilege into a parent namespace. Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>