Messages in this thread | | | From | Andy Lutomirski <> | Date | Thu, 21 Aug 2014 17:11:26 -0700 | Subject | Re: Issue with clone() and CLONE_NEWUSER as unprivileged user |
| |
On Thu, Aug 21, 2014 at 3:26 PM, Marcel Holtmann <marcel@holtmann.org> wrote: > Hi Andy, > >>> I am trying to use clone() and CLONE_NEWUSER for creating a new user namespace as an unprivileged user. I always get an operation not permitted error. However when I used fork() + unshare() as unprivileged user, I can create the new user namespace just fine. >>> >>> Is there something obvious that I am missing? My understand is that CLONE_NEWUSER should not require any special capabilities. I tried the sample code from the manpage and also from LWN.net, but both give me the same error. >> >> It works for me on 3.16 and 3.15 but not on 3.15.8-200.fc20.x86_64. I'm >> a bit confused. What kernel are you using? > > I am running 3.15.6-200.fc20.x86_64 actually. What confused me is that fork() + unshare() works fine, but clone() doesn't.
Ok, tracked it down. This is a Fedora-specific issue.
https://bugzilla.redhat.com/show_bug.cgi?id=917708
--Andy
| |