You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@mesos.apache.org by "Paul Brett (JIRA)" <ji...@apache.org> on 2015/06/27 00:01:04 UTC
[jira] [Created] (MESOS-2952) Provide user namespaces for
privileged access inside containers
Paul Brett created MESOS-2952:
---------------------------------
Summary: Provide user namespaces for privileged access inside containers
Key: MESOS-2952
URL: https://issues.apache.org/jira/browse/MESOS-2952
Project: Mesos
Issue Type: Bug
Reporter: Paul Brett
Assignee: Paul Brett
User namespaces allow per-namespace mappings of user and group IDs. This means that a process's user and group IDs inside a user namespace can be different from its IDs outside of the namespace. Most notably, a process can have a nonzero user ID outside a namespace while at the same time having a user ID of zero inside the namespace; in other words, the process is unprivileged for operations outside the user namespace but has root privileges inside the namespace.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)