[Bug 120671] missing info about userns restrictions - bugzilla-daemon-590EEB7GvNiWaY/ihj7yzEB+6BGkLq7r

From: bugzilla-daemon-590EEB7GvNiWaY/ihj7yzEB+6BGkLq7r@public.gmane.org
To: linux-man-u79uwXL29TY76Z2rM5mHXA@public.gmane.org
Subject: [Bug 120671] missing info about userns restrictions
Date: Mon, 20 Jun 2016 14:36:32 +0000	[thread overview]
Message-ID: <bug-120671-11311-ijQtFaj27a@https.bugzilla.kernel.org/> (raw)
In-Reply-To: <bug-120671-11311-3bo0kxnWaOQUvHkbgXJLS5sdmw4N0Rt+2LY78lusg7I@public.gmane.org/>

https://bugzilla.kernel.org/show_bug.cgi?id=120671

--- Comment #2 from Michał Zegan <webczat_200-wo4oW1Pw1HF3vZ0LZ0W7Rg@public.gmane.org> ---
Well... For example, cap_sys_module does not work in user namespace, doesn't
it? cap_sys_mknod last i checked did not work in userns, but may be wrong.
About mounting filesystems, there is probably a whitelist. If I recall
correctly you are unable to mount any block based fs like ext4 inside of the
userns, like you have no permissions to mount most of them except tmpfs, proc
and such like. There may be other restrictions I am not aware of, but those are
some I know, unless I am wrong. It will help to clarify some things that are
just not present in that manpage.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.--
To unsubscribe from this list: send the line "unsubscribe linux-man" in
the body of a message to majordomo-u79uwXL29TY76Z2rM5mHXA@public.gmane.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html