Robert Swiecki
3b83267cfd
Init user-ns setresuid/setresgid before initializing other NSes
2017-02-07 18:31:50 +01:00
Robert Swiecki
fe7fe8591f
Use common subprocSystem for executing commands
2016-10-12 02:01:12 +02:00
Robert Swiecki
a30e2f107c
Make indent
2016-10-12 00:59:10 +02:00
Stephen Röttger
1c950391a1
Support more complex uid and gid mappings
...
Introduces the new options uid_mapping and gid_mapping that specify
arbitrary custom mappings. If these options are used, nsjail will
use newuidmap/newgidmap to write the map files.
2016-09-30 15:30:15 +02:00
Jagger
1e7e0f6303
Remove reduntant check
2016-03-04 01:30:56 +01:00
Jagger
65c3ca8a15
Check for specific clone flags before enabling functionality
2016-03-03 20:11:32 +01:00
Robert Swiecki
2652872fac
CLONE_NEWUSER routines in a separate module
2016-03-03 15:54:15 +01:00