jasder
/
runc
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Merge pull request #634 from tonistiigi/clear-groups 

Clear groups after entering userns
This commit is contained in:
Mrunal Patel 2016-03-11 09:45:39 -08:00
parent 1beb2410db 04da969aa8
commit 2524befb52
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
libcontainer/nsenter/nsexec.c
View File

@ -16,6 +16,7 @@
#include <sys/types.h> #include <sys/types.h>
#include <sys/prctl.h> #include <sys/prctl.h>
#include <unistd.h> #include <unistd.h>
#include <grp.h>
#include <bits/sockaddr.h> #include <bits/sockaddr.h>
#include <linux/types.h> #include <linux/types.h>
@ -383,6 +384,11 @@ static void process_nl_attributes(int pipenum, char *data, int data_size)
pr_perror("setgid failed"); pr_perror("setgid failed");
exit(1); exit(1);
} }
if (setgroups(0, NULL) == -1) {
pr_perror("setgroups failed");
exit(1);
}
if (consolefd != -1) { if (consolefd != -1) {
if (ioctl(consolefd, TIOCSCTTY, 0) == -1) { if (ioctl(consolefd, TIOCSCTTY, 0) == -1) {