You are not logged in.

#1 2020-03-04 23:34:21

maxleonca
Member
Registered: 2015-02-06
Posts: 3

Users namespaces not available in 5.4.23

Hi,
This is a newbie question but I'm scratching my head over it.

/proc/sys/kernel/unprivileged_userns_clone is absent from my system.

But:

zgrep CONFIG_NAMESPACES /proc/config.gz
CONFIG_NAMESPACES=y

and:

zgrep USER_NS /proc/config.gz
CONFIG_USER_NS=y

Any ideas?

Thank you

Offline

#2 2020-03-04 23:37:56

loqs
Member
Registered: 2014-03-06
Posts: 18,928

Re: Users namespaces not available in 5.4.23

linux-lts dropped all out of tree patches with https://git.archlinux.org/svntogit/pack … 2fc32487f1
so user namespaces are always available to all users in linux-lts 5.4.23.

Offline

#3 2020-03-05 20:23:08

eschwartz
Fellow
Registered: 2014-08-08
Posts: 4,097

Re: Users namespaces not available in 5.4.23

That's a bug, I've nudged someone to fix it. Unprivileged USER_NS should not be enabled without a sysctl to disable it.


Managing AUR repos The Right Way -- aurpublish (now a standalone tool)

Offline

#4 2020-03-06 00:15:42

maxleonca
Member
Registered: 2015-02-06
Posts: 3

Re: Users namespaces not available in 5.4.23

Thank you!

Offline

#5 2020-03-06 00:27:15

eschwartz
Fellow
Registered: 2014-08-08
Posts: 4,097

Re: Users namespaces not available in 5.4.23

https://git.archlinux.org/svntogit/pack … f423e5a402

+CONFIG_USER_NS_UNPRIVILEGED=y

With the patch, re-added, to make this default toggleable and overrideable via the sysctl you expected.


Managing AUR repos The Right Way -- aurpublish (now a standalone tool)

Offline

Board footer

Powered by FluxBB