mirror of
https://github.com/torvalds/linux
synced 2024-09-06 09:51:23 +00:00
vfs: Allow chroot if you have CAP_SYS_CHROOT in your user namespace
Once you are confined to a user namespace applications can not gain privilege and escape the user namespace so there is no longer a reason to restrict chroot. Acked-by: Serge Hallyn <serge.hallyn@canonical.com> Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
This commit is contained in:
parent
50804fe373
commit
a85fb273c9
Loading…
Reference in a new issue