go
/
gvisor
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
gvisor/runsc/test/testutil
History
Nicolas Lacasse 0a9a40abcd runsc: Run sandbox as user nobody. 
When starting a sandbox without direct file or network access, we create an
empty user namespace and run the sandbox in there.  However, the root user in
that namespace is still mapped to the root user in the parent namespace.

This CL maps the "nobody" user from the parent namespace into the child
namespace, and runs the sandbox process as user "nobody" inside the new
namespace.

PiperOrigin-RevId: 211572223
Change-Id: I1b1f9b1a86c0b4e7e5ca7bc93be7d4887678bab6
 		2018-09-04 20:33:05 -07:00
..
BUILD Put fsgofer inside chroot 2018-08-27 11:10:14 -07:00
docker.go Put fsgofer inside chroot 2018-08-27 11:10:14 -07:00
testutil.go runsc: Run sandbox as user nobody. 2018-09-04 20:33:05 -07:00
testutil_race.go Add KVM and overlay dimensions to container_test 2018-07-23 13:31:42 -07:00