diff options
| author | Eric W. Biederman | 2013-01-11 23:53:34 +0100 |
|---|---|---|
| committer | Karel Zak | 2013-01-17 13:17:32 +0100 |
| commit | bc7f9b95c04a8a6bb60cf2e58df47567f30cb989 (patch) | |
| tree | 2906c12b6bd6cac8a7b3e604e55b3f6c18159c38 /sys-utils/unshare.1 | |
| parent | nsenter: new command (light wrapper around setns) (diff) | |
| download | kernel-qcow2-util-linux-bc7f9b95c04a8a6bb60cf2e58df47567f30cb989.tar.gz kernel-qcow2-util-linux-bc7f9b95c04a8a6bb60cf2e58df47567f30cb989.tar.xz kernel-qcow2-util-linux-bc7f9b95c04a8a6bb60cf2e58df47567f30cb989.zip | |
unshare: Add support for the pid and user namespaces
- Update the unshare application to support the pid and user namespaces.
- Update the man page for the new options
- Fix typo in the man page where UTS was spelled UTC.
- Remove the vestigal support for running a suid unshare.
After unsharing a user namespace setuid(getuid()) won't work because
no uid or gid mappings have been specified yet. So it is just easier not
to have any support for running suid.
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
Diffstat (limited to 'sys-utils/unshare.1')
| -rw-r--r-- | sys-utils/unshare.1 | 19 |
1 files changed, 15 insertions, 4 deletions
diff --git a/sys-utils/unshare.1 b/sys-utils/unshare.1 index 1325e3481..8cdc6e52e 100644 --- a/sys-utils/unshare.1 +++ b/sys-utils/unshare.1 @@ -1,7 +1,7 @@ .\" Process this file with .\" groff -man -Tascii lscpu.1 .\" -.TH UNSHARE 1 "October 2008" "util-linux" "User Commands" +.TH UNSHARE 1 "January 2013" "util-linux" "User Commands" .SH NAME unshare \- run program with some namespaces unshared from parent .SH SYNOPSIS @@ -31,6 +31,13 @@ process will have independent IPv4 and IPv6 stacks, IP routing tables, firewall rules, the \fI/proc/net\fP and \fI/sys/class/net\fP directory trees, sockets etc. (\fBCLONE_NEWNET\fP flag). .TP +.BR "pid namespace" +children will have a distinct set of pid to process mappings than their parent. +(\fBCLONE_NEWPID\fP flag). +.TP +.BR "user namespace" +process will have distinct set of uids, gids and capabilities. (\fBCLONE_NEWUSER\fP flag). +.TP See the \fBclone\fR(2) for exact semantics of the flags. .SH OPTIONS .TP @@ -41,16 +48,20 @@ Print a help message, Unshare the mount namespace, .TP .BR \-u , " \-\-uts" -Unshare the UTC namespace, +Unshare the UTS namespace, .TP .BR \-i , " \-\-ipc" Unshare the IPC namespace, .TP .BR \-n , " \-\-net" Unshare the network namespace. +.TP +.BR \-p , " \-\-pid" +Unshare the pid namespace. +.TP +.BR \-U , " \-\-user" +Unshare the user namespace. .SH NOTES -The unshare command drops potential privileges before executing the -target program. This allows to setuid unshare. .SH SEE ALSO .BR unshare (2), .BR clone (2) |