morgan/systemd
1
0
Fork 0
mirror of https://github.com/morgan9e/systemd synced 2026-04-14 08:25:20 +09:00
Code Issues Packages Projects Releases Wiki Activity

namespace-util: don't reset UID/GIDs in namespace_enter() unless we enter a userns

Browse Source 
The reset of UID/GID only really makes sense if we enter a userns, hence
let#s restrict it to that.
This commit is contained in:
Lennart Poettering
2025-01-15 23:18:39 +01:00
committed by Mike Yuan
parent ca97d48bd4
commit 39706728e1
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/basic/namespace-util.c
View File

@@ -247,7 +247,10 @@ int namespace_enter(int pidns_fd, int mntns_fd, int netns_fd, int userns_fd, int
return -errno;
}
return reset_uid_gid();
if (userns_fd >= 0)
return reset_uid_gid();
return 0;
}
int fd_is_namespace(int fd, NamespaceType type) {
@@ -768,4 +771,3 @@ int netns_acquire(void) {
return pidref_namespace_open_by_type(&pid, NAMESPACE_NET);
}