]> git.ipfire.org Git - thirdparty/systemd.git/commit
projects / thirdparty / systemd.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(merge: a8211e8 cadeaef)
nspawn: Drop CAP_NET_BIND_SERVICE if in userns with identity mapping (#38723)
authorDaan De Meyer <daan.j.demeyer@gmail.com>
Fri, 5 Sep 2025 07:08:44 +0000 (09:08 +0200)
committerGitHub <noreply@github.com>
Fri, 5 Sep 2025 07:08:44 +0000 (09:08 +0200)
commitf743084035c637fa804b543fac21b3de17a32050
treee7192d4518ff031f207d76556f9ed9fae710c3catree | snapshot
parenta8211e88c7d6feea73fe468e4aecf7b76367d8a3commit | diff
parentcadeaef67cb0f11bd968cfd6a183bcbfc73b0c70commit | diff
nspawn: Drop CAP_NET_BIND_SERVICE if in userns with identity mapping (#38723)

Even if there's no uid shift, we still won't be able to bind to
privileged ports in the host network namespace, so drop the capability
regardless of whether we have a uid shift or not.
Unnamed repository; edit this file 'description' to name the repository.