You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@mesos.apache.org by "Jie Yu (JIRA)" <ji...@apache.org> on 2017/07/10 19:29:00 UTC

[jira] [Assigned] (MESOS-2952) Provide user namespaces for privileged access inside containers

     [ https://issues.apache.org/jira/browse/MESOS-2952?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jie Yu reassigned MESOS-2952:
-----------------------------

    Assignee:     (was: Vaibhav Khanduja)

> Provide user namespaces for privileged access inside containers
> ---------------------------------------------------------------
>
>                 Key: MESOS-2952
>                 URL: https://issues.apache.org/jira/browse/MESOS-2952
>             Project: Mesos
>          Issue Type: Epic
>            Reporter: Paul Brett
>
> User namespaces allow per-namespace mappings of user and group IDs. This means that a process's user and group IDs inside a user namespace can be different from its IDs outside of the namespace. Most notably, a process can have a nonzero user ID outside a namespace while at the same time having a user ID of zero inside the namespace; in other words, the process is unprivileged for operations outside the user namespace but has root privileges inside the namespace.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)