aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMichael Kerrisk <mtk.manpages@gmail.com>2013-02-28 13:51:49 +0100
committerMichael Kerrisk <mtk.manpages@gmail.com>2014-09-13 20:16:00 -0700
commitdf23ae04d67ca492dec454d702c69c2fe7607f71 (patch)
treeb529fcd0bc1d09dc26813b3d71f095b157a24505
parente4f4f2e12561236fb4fe8d9a1f5e8635201ac0cc (diff)
downloadman-pages-df23ae04d67ca492dec454d702c69c2fe7607f71.tar.gz
user_namespaces.7: Linux 3.9 provides a better implementation of nonoverlapping map checks
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
-rw-r--r--man7/user_namespaces.710
1 files changed, 7 insertions, 3 deletions
diff --git a/man7/user_namespaces.7 b/man7/user_namespaces.7
index 54f5d6922e..25c51228d6 100644
--- a/man7/user_namespaces.7
+++ b/man7/user_namespaces.7
@@ -311,11 +311,15 @@ can't be used to write to nonzero offsets in the file).
The range of user IDs (group IDs)
specified in each line cannot overlap with the ranges
in any other lines.
-In the current implementation (Linux 3.8), this requirement is
-satisfied by a simplistic implementation that imposes the further
+In the initial implementation (Linux 3.8), this requirement was
+satisfied by a simplistic implementation that imposed the further
requirement that
the values in both field 1 and field 2 of successive lines must be
-in ascending numerical order.
+in ascending numerical order,
+which prevented some otherwise valid maps from being created.
+Linux 3.9 and later
+.\" commit 0bd14b4fd72afd5df41e9fd59f356740f22fceba
+fix this limitation, allowing any valid set of nonoverlapping maps.
.IP *
The mapped user IDs (group IDs) must in turn have a mapping
in the parent user namespace.