mesos-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Aaron Wood (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (MESOS-2952) Provide user namespaces for privileged access inside containers
Date Wed, 02 Nov 2016 04:15:58 GMT

    [ https://issues.apache.org/jira/browse/MESOS-2952?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15627630#comment-15627630
] 

Aaron Wood commented on MESOS-2952:
-----------------------------------

This would be great to have. If there's anything I can help with please let me know!

> Provide user namespaces for privileged access inside containers
> ---------------------------------------------------------------
>
>                 Key: MESOS-2952
>                 URL: https://issues.apache.org/jira/browse/MESOS-2952
>             Project: Mesos
>          Issue Type: Epic
>            Reporter: Paul Brett
>            Assignee: Vaibhav Khanduja
>
> User namespaces allow per-namespace mappings of user and group IDs. This means that a
process's user and group IDs inside a user namespace can be different from its IDs outside
of the namespace. Most notably, a process can have a nonzero user ID outside a namespace while
at the same time having a user ID of zero inside the namespace; in other words, the process
is unprivileged for operations outside the user namespace but has root privileges inside the
namespace.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message