[LTP] [PATCH] containers: override kernel.unprivileged_userns_clone sysctl where needed

Petr Vorel pvorel@suse.cz
Thu Mar 23 17:29:04 CET 2023


> BTW it took me a while to find out /proc/sys/kernel/unprivileged_userns_clone is
> Debian out of tree patch [1] (The funny note from 2013 "This is a short-term patch")
> probably refused by upstream kernel (I've only found 3 years later one of Debian
> kernel maintainers Ben Hutchings talking about it [2]).

For curious people the detail about the patch being refused by the Linux kernel
developers:
https://lwn.net/Articles/673597/

Kind regards,
Petr

> Kind regards,
> Petr

> [1] https://salsa.debian.org/kernel-team/linux/-/blob/master/debian/patches/debian/add-sysctl-to-disallow-unprivileged-CLONE_NEWUSER-by-default.patch
> [2] https://lore.kernel.org/lkml/1453510799.3734.153.camel@decadent.org.uk/


More information about the ltp mailing list