jasder
/
runc
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Validation for User Namespaces in the config. 

Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
This commit is contained in:
Mrunal Patel 2015-02-18 23:14:01 -08:00
parent d06a2dab9f
commit f34b3b765f
1 changed files with 17 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
configs/validate/config.go
View File

@ -2,6 +2,7 @@ package validate
import (
"fmt"
"os"
"path/filepath"
"github.com/docker/libcontainer/configs"
@ -31,6 +32,9 @@ func (v *ConfigValidator) Validate(config *configs.Config) error {
if err := v.security(config); err != nil {
return err
}
if err := v.usernamespace(config); err != nil {
return err
}
return nil
}
@ -74,3 +78,16 @@ func (v *ConfigValidator) security(config *configs.Config) error {
}
return nil
}
func (v *ConfigValidator) usernamespace(config *configs.Config) error {
if config.Namespaces.Contains(configs.NEWUSER) {
if _, err := os.Stat("/proc/self/ns/user"); os.IsNotExist(err) {
return fmt.Errorf("USER namespaces aren't enabled in the kernel")
}
} else {
if config.UidMappings != nil || config.GidMappings != nil {
return fmt.Errorf("User namespace mappings specified, but USER namespace isn't enabled in the config")
}
}
return nil
}