user_namespaces.7: Linux 3.9 provides a better implementation of nonoverlapping map checks

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
This commit is contained in:
Michael Kerrisk 2013-02-28 13:51:49 +01:00
parent e4f4f2e125
commit df23ae04d6
1 changed files with 7 additions and 3 deletions

View File

@ -311,11 +311,15 @@ can't be used to write to nonzero offsets in the file).
The range of user IDs (group IDs)
specified in each line cannot overlap with the ranges
in any other lines.
In the current implementation (Linux 3.8), this requirement is
satisfied by a simplistic implementation that imposes the further
In the initial implementation (Linux 3.8), this requirement was
satisfied by a simplistic implementation that imposed the further
requirement that
the values in both field 1 and field 2 of successive lines must be
in ascending numerical order.
in ascending numerical order,
which prevented some otherwise valid maps from being created.
Linux 3.9 and later
.\" commit 0bd14b4fd72afd5df41e9fd59f356740f22fceba
fix this limitation, allowing any valid set of nonoverlapping maps.
.IP *
The mapped user IDs (group IDs) must in turn have a mapping
in the parent user namespace.