Re: handling of supplemental groups with userns

On 22 Sep 2015 17:52, Mike Frysinger wrote: > On 22 Sep 2015 14:40, Eric W. Biederman wrote: > > Mike Frysinger writes: > > > in the mean time, a "quick" fix might be to change new_idmap_permitted > > > to walk all the extents, and if all the ranges are set to 1, check the > > > supplemental groups

Re: handling of supplemental groups with userns

On 22 Sep 2015 14:40, Eric W. Biederman wrote: > Mike Frysinger writes: > > is it possible to map in supplemental groups in a userns when the user > > lacks setgid/etc... capabilities in the parent ns ? it doesn't seem > > like it's currently possible, but is there a reason to not enable it ? > >