delta/util-linux.git/sys-utils/nsenter.c, branch baserock/morph git.kernel.org: pub/scm/utils/util-linux/util-linux.git nsenter: fix set{gid,uid} order,drop supplementary groups 2014-04-23T08:54:31+00:00 Karel Zak kzak@redhat.com 2014-02-06T13:14:50+00:00 5ab908b41b12c83af18e1e349d4ef2f38a4435b8 .. always, always setgid() before setuid()! Addresses: https://bugzilla.redhat.com/show_bug.cgi?id=1061751 Signed-off-by: Karel Zak <kzak@redhat.com> 
.. always, always setgid() before setuid()!

Addresses: https://bugzilla.redhat.com/show_bug.cgi?id=1061751
Signed-off-by: Karel Zak <kzak@redhat.com>
nsenter: unshare: use LC_ALL 2013-10-18T09:38:02+00:00 Karel Zak kzak@redhat.com 2013-10-18T08:19:15+00:00 999ac5e2ab57c9f79237cec620bbb00d5db9f335 Reported-by: Trần Ngọc Quân <vnwildman@gmail.com> Signed-off-by: Karel Zak <kzak@redhat.com> 
Reported-by: Trần Ngọc Quân <vnwildman@gmail.com>
Signed-off-by: Karel Zak <kzak@redhat.com>
nsenter: Allow selecting the uid and gid to be used in the entered userns 2013-06-18T08:35:44+00:00 Richard Weinberger richard@nod.at 2013-06-18T08:35:44+00:00 6b9e5bf670c70690d44b8ce4055e1997fb0b6496 Using -S (--setuid) and -G (--setgid) one can select the uid/gid which will be used in the entered user namespace. [kzak@redhat.com: - use setuid/gid unconditionally (always), - update man page] Acked-by: "Eric W. Biederman" <ebiederm@xmission.com> Signed-off-by: Richard Weinberger <richard@nod.at> Signed-off-by: Karel Zak <kzak@redhat.com> 
Using -S (--setuid) and -G (--setgid) one can select the uid/gid which
will be used in the entered user namespace.

[kzak@redhat.com: - use setuid/gid unconditionally (always),
                  - update man page]

Acked-by: "Eric W. Biederman" <ebiederm@xmission.com>
Signed-off-by: Richard Weinberger <richard@nod.at>
Signed-off-by: Karel Zak <kzak@redhat.com>
unshare,nsenter: spawn shell by default 2013-02-14T13:42:35+00:00 Zbigniew Jędrzejewski-Szmek zbyszek@in.waw.pl 2013-02-14T02:05:48+00:00 57580694269be36cc52138b0f82e72f09338e192 The behaviour mimics chroot. Possibly it would have been nicer to to query the password database in the new namepace and run the shell of the user there, but it's hard to do correctly. getpwuid() might need to load nss plugins, and the arch in the new namespace might be different (in case of NEWNS mounts), or the hostname might be different, etc. So in general it's not possible to do it reliably. Signed-off-by: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> 
The behaviour mimics chroot.

Possibly it would have been nicer to to query the password database in
the new namepace and run the shell of the user there, but it's hard to
do correctly. getpwuid() might need to load nss plugins, and the arch
in the new namespace might be different (in case of NEWNS mounts), or
the hostname might be different, etc. So in general it's not possible
to do it reliably.

Signed-off-by: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>
translation: unify exec error messages 2013-02-06T10:51:17+00:00 Sami Kerola kerolasa@iki.fi 2013-01-30T20:33:24+00:00 07ff972eb684cfc88ca1931123fc255927393118 Signed-off-by: Sami Kerola <kerolasa@iki.fi> 
Signed-off-by: Sami Kerola <kerolasa@iki.fi>
nsenter: make usage() translator friendly 2013-01-25T15:40:04+00:00 Sami Kerola kerolasa@iki.fi 2013-01-22T23:27:01+00:00 26f879edf53503db81739d7b27720e57fabedf18 Signed-off-by: Sami Kerola <kerolasa@iki.fi> 
Signed-off-by: Sami Kerola <kerolasa@iki.fi>
nsenter: respect --exec no matter where it appears 2013-01-25T15:32:01+00:00 Zbigniew Jędrzejewski-Szmek zbyszek@in.waw.pl 2013-01-25T15:32:01+00:00 57dbcf94d8178009ce1f6ebf7b5bbddfe3d26ac8 Signed-off-by: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> Signed-off-by: Karel Zak <kzak@redhat.com> 
Signed-off-by: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>
Signed-off-by: Karel Zak <kzak@redhat.com>
nsenter: fix indentation 2013-01-25T14:42:11+00:00 Sami Kerola kerolasa@iki.fi 2013-01-20T18:04:56+00:00 a167328a7421a23ca0f3d249225f9851d111fc3e Signed-off-by: Sami Kerola <kerolasa@iki.fi> 
Signed-off-by: Sami Kerola <kerolasa@iki.fi>
nsenter: drop core when impossible happens 2013-01-25T14:41:00+00:00 Sami Kerola kerolasa@iki.fi 2013-01-20T18:04:55+00:00 dfd8b1171be7d9458a18e88e7f925a0da0523135 Message to user is less informative, but impossible events should be rare so core files are much appriciated for these cases. Signed-off-by: Sami Kerola <kerolasa@iki.fi> 
Message to user is less informative, but impossible events should be
rare so core files are much appriciated for these cases.

Signed-off-by: Sami Kerola <kerolasa@iki.fi>
nsenter: fix compiler warning 2013-01-25T14:38:36+00:00 Sami Kerola kerolasa@iki.fi 2013-01-20T18:04:54+00:00 9905912fa74c037b4da9e277ab08afbafe6fb470 nsenter.c:53:2: warning: ISO C forbids empty initializer braces [-pedantic] [kzak@redhat.com: - use initialize .fd to -1] Signed-off-by: Sami Kerola <kerolasa@iki.fi> Signed-off-by: Karel Zak <kzak@redhat.com> 
nsenter.c:53:2: warning: ISO C forbids empty initializer braces [-pedantic]

[kzak@redhat.com: - use initialize .fd to -1]

Signed-off-by: Sami Kerola <kerolasa@iki.fi>
Signed-off-by: Karel Zak <kzak@redhat.com>