search

tailhook / vagga

Vagga is a containerization tool without daemons
http://vagga.readthedocs.org
MIT License
1.86k stars 96 forks source link

Investigate why newuidmap/newgidmap in shadow 4.4 doesn't have setuid bit (Archlinux) #362

Open tailhook opened 7 years ago

tailhook commented 7 years ago

Reported here: https://github.com/tailhook/vagga/issues/12#issuecomment-259389901

This should be reported upstream

roman901 commented 7 years ago

Also may help writing 'deny' to /proc/PID/setgroups

tailhook commented 7 years ago

It's fixed here: https://github.com/shadow-maint/shadow/pull/43 We are waiting for the new release of the package