Re: [lxc-devel] usernsselfmap

2013-03-07 Thread Kees Cook
On Wed, Mar 6, 2013 at 2:25 PM, Serge Hallyn wrote: > just to help play with user namespaces some more I pushed a C version > of Eric's script for completely unprivileged use of user namespaces to > https://code.launchpad.net/~serge-hallyn/+junk/nsexec and to the > nsexec package in ppa:serge-hall

Re: [lxc-devel] usernsselfmap

2013-03-06 Thread Eric W. Biederman
Serge Hallyn writes: > Quoting Eric W. Biederman (ebied...@xmission.com): > ... >> For what it's worth. If you are going to do a combined binary, and you >> are just going to worry about yourself. You don't have to fork to >> write /proc/self/uid_map with 0 $old_uid 1. > > Well, shoot! I figur

Re: [lxc-devel] usernsselfmap

2013-03-06 Thread Serge Hallyn
Quoting Eric W. Biederman (ebied...@xmission.com): ... > For what it's worth. If you are going to do a combined binary, and you > are just going to worry about yourself. You don't have to fork to > write /proc/self/uid_map with 0 $old_uid 1. Well, shoot! I figured since we'd already unshared, o

Re: [lxc-devel] usernsselfmap

2013-03-06 Thread Eric W. Biederman
Kees Cook writes: > On Wed, Mar 6, 2013 at 2:25 PM, Serge Hallyn wrote: >> just to help play with user namespaces some more I pushed a C version >> of Eric's script for completely unprivileged use of user namespaces to >> https://code.launchpad.net/~serge-hallyn/+junk/nsexec and to the >> nsexec

[lxc-devel] usernsselfmap

2013-03-06 Thread Serge Hallyn
Hey guys, just to help play with user namespaces some more I pushed a C version of Eric's script for completely unprivileged use of user namespaces to https://code.launchpad.net/~serge-hallyn/+junk/nsexec and to the nsexec package in ppa:serge-hallyn/userns-natty. Appending the code below as well