Commit f6104dff by Serge Hallyn Committed by GitHub

Merge pull request #1594 from brauner/2017-05-27/new_readme

README: reword id mapping restrictions when unpriv
parents 486e37c8 ac8f64dc
...@@ -70,10 +70,10 @@ quite restricted. Just to highlight the two most common problems: ...@@ -70,10 +70,10 @@ quite restricted. Just to highlight the two most common problems:
inside of the container will not be able to boot up correctly. inside of the container will not be able to boot up correctly.
2. User Namespaces: As outlined above, user namespaces are a big security 2. User Namespaces: As outlined above, user namespaces are a big security
enhancement. However, users which are unprivileged on the host will only be enhancement. However, without relying on privileged helpers users who are
able to establish a mapping for their own UID if they do not rely on unprivileged on the host are only permitted to map their own UID into
privileged helpers. A standard POSIX system however, requires 65536 UIDs and a container. A standard POSIX system however, requires 65536 UIDs and GIDs
GIDs to be available to guarantee full functionality. to be available to guarantee full functionality.
## Configuration ## Configuration
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment