Giuseppe Scrivano 849548ffb8 userns: do not use an intermediate mount namespace ...

We have an issue in the current implementation where the cleanup
process is not able to umount the storage as it is running in a
separate namespace.

Simplify the implementation for user namespaces by not using an
intermediate mount namespace.  For doing it, we need to relax the
permissions on the parent directories and allow browsing
them. Containers that are running without a user namespace, will still
maintain mode 0700 on their directory.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>

2019-03-29 14:04:44 +01:00

3.9 KiB

Raw Blame History

View Raw