search for: capeff

...88 kB VmExe: 140 kB VmLib: 2348 kB VmPTE: 52 kB VmSwap: 0 kB Threads: 1 SigQ: 1/256326 SigPnd: 0000000000000000 ShdPnd: 0000000000000000 SigBlk: 0000000000000000 SigIgn: 0000000000001000 SigCgt: 00000001a0016623 CapInh: 0000000000000000 CapPrm: ffffffffffffffff CapEff: fffffffffffffeff CapBnd: ffffffffffffffff Cpus_allowed: 7fff7fff Cpus_allowed_list: 0-14,16-30 Mems_allowed: 00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000003 Mems_allowed_list: 0-1 voluntar...

...3 4 6 10 VmSize: 4888 kB VmLck: 0 kB VmRSS: 1944 kB VmData: 692 kB VmStk: 112 kB VmExe: 1220 kB VmLib: 2336 kB SigPnd: 0000000000000000 SigBlk: 0000000080000000 SigIgn: 8000000000000000 SigCgt: 00000003fffbfeff CapInh: 0000000000000000 CapPrm: 00000000fffffeff CapEff: 00000000fffffeff

...have always limited permissions even if uid=0 inside container is mapped to uid=0 outside? # cat /proc/$$/uid_map 0 0 1 # cat /proc/$$/gid_map 0 0 1 # cat /proc/$$/status | grep Cap CapInh: 0000000000000000 CapPrm: 0000001fffffffff CapEff: 0000001fffffffff CapBnd: 0000001fffffffff -- Piotr Bartosiewicz

Hi there! I am trying to turn on user namespace by adding following lines to the config: <idmap> <uid start='0' target='0' count='100000'/> <gid start='0' target='0' count='100000'/> </idmap> As you can see the root in container is mapped to the root outside. I was expected to see no difference

...364 kB VmStk: 88 kB VmExe: 224 kB VmLib: 2460 kB VmPTE: 64 kB Threads: 1 SigQ: 2/6081 SigPnd: 0000000000000000 ShdPnd: 0000000000000000 SigBlk: 0000000000000000 SigIgn: 0000000000001000 SigCgt: 0000000181000242 CapInh: 0000000000000000 CapPrm: ffffffffffffffff CapEff: ffffffffffffffff CapBnd: ffffffffffffffff Cpus_allowed: 1 Cpus_allowed_list: 0 Mems_allowed: 1 Mems_allowed_list: 0 voluntary_ctxt_switches: 4155 nonvoluntary_ctxt_switches: 3559 Even doing an ls or trying to use tab completion in /proc/11327/ will result in your proc go...