|
From: | Markus Armbruster |
Subject: | Re: [Qemu-devel] [PATCH 10/16] os-posix: Provide new -runas <uid>:<gid> facility |
Date: | Fri, 20 Apr 2018 14:56:35 +0200 |
User-agent: | Gnus/5.13 (Gnus v5.13) Emacs/25.3 (gnu/linux) |
Ian Jackson <address@hidden> writes: > This allows the caller to specify a uid and gid to use, even if there > is no corresponding password entry. This will be useful in certain > Xen configurations. > > We don't support just -runas <uid> because: (i) deprivileging without > calling setgroups would be ineffective (ii) given only a uid we don't > know what gid we ought to use (since uids may eppear in multiple > passwd file entries with different gids). > > Signed-off-by: Ian Jackson <address@hidden> > Reviewed-by: Anthony PERARD <address@hidden> > CC: Paolo Bonzini <address@hidden> > CC: Markus Armbruster <address@hidden> > CC: Daniel P. Berrange <address@hidden> > CC: Michael Tokarev <address@hidden> Reviewed-by: Markus Armbruster <address@hidden>
[Prev in Thread] | Current Thread | [Next in Thread] |