opensource/podman
1
0
Fork 0
mirror of https://github.com/containers/podman.git synced 2025-06-27 05:26:50 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #7871 from rhatdan/gid

Browse Source 
Add additionalGIDs from users in rootless mode
This commit is contained in:
OpenShift Merge Robot
2020-10-01 21:21:22 -04:00
committed by GitHub
parent a88f404fe1 baede7cd27
commit 54a9ecc262
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
libpod/container_internal_linux.go
View File

@ -415,8 +415,9 @@ func (c *Container) generateSpec(ctx context.Context) (*spec.Spec, error) {
} }
// Look up and add groups the user belongs to, if a group wasn't directly specified // Look up and add groups the user belongs to, if a group wasn't directly specified
if !rootless.IsRootless() && !strings.Contains(c.config.User, ":") { if !strings.Contains(c.config.User, ":") {
for _, gid := range execUser.Sgids { for _, gid := range execUser.Sgids {
// FIXME: We need to add a flag to containers.conf to not add these for HPC Users.
g.AddProcessAdditionalGid(uint32(gid)) g.AddProcessAdditionalGid(uint32(gid))
} }
} }