Nicolas Lacasse 0a9a40abcd runsc: Run sandbox as user nobody. ... When starting a sandbox without direct file or network access, we create an empty user namespace and run the sandbox in there. However, the root user in that namespace is still mapped to the root user in the parent namespace. This CL maps the "nobody" user from the parent namespace into the child namespace, and runs the sandbox process as user "nobody" inside the new namespace. PiperOrigin-RevId: 211572223 Change-Id: I1b1f9b1a86c0b4e7e5ca7bc93be7d4887678bab6		2018-09-04 20:33:05 -07:00
..
image	Consolidate image tests into a single file	2018-08-28 11:31:04 -07:00
integration	Fix runsc integration_test when using --network=host	2018-08-09 17:05:24 -07:00
testutil	runsc: Run sandbox as user nobody.	2018-09-04 20:33:05 -07:00
install.sh	Created runsc and docker integration tests.	2018-07-11 09:37:28 -07:00