Bug 1393404
Summary: | No supplementary group defined in systemd-nspawn container | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Vít Ondruch <vondruch> |
Component: | systemd | Assignee: | systemd-maint |
Status: | CLOSED NOTABUG | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | unspecified | Docs Contact: | |
Priority: | unspecified | ||
Version: | rawhide | CC: | jdisnard, johannbg, lnykryn, mebrown, msekleta, msimacek, msuchy, muadda, praiskup, ssahani, s, systemd-maint, williams, zbyszek |
Target Milestone: | --- | ||
Target Release: | --- | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | If docs needed, set a value | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2016-11-22 23:17:49 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Vít Ondruch
2016-11-09 13:09:25 UTC
I am able to reproduce it with plain systemd-nspawn: [mirek@triple//tmp]1$ sudo /usr/bin/systemd-nspawn -q -M 36cda89a9cf74a088c47a782bda54299 -D /var/lib/mock/fedora-25-x86_64/root --setenv=HOSTNAME=mock --setenv=HOME=/builddir -u 1000 /bin/sh -i -l [sudo] password for mirek: sh-4.3$ /a.out No supplementary group sh-4.3$ id uid=1000(mockbuild) gid=135(mockbuild) groups=135(mockbuild) Note, that I'm not sure if "supplementary groups" should include the primary group. But it seems that this is default behaviour outside of container. The getgroups(2) man page is pretty clear: It is unspecified whether the effective group ID of the calling process is included in the returned list. (Thus, an application should also call getegid(2) and add or remove the resulting value.) I don't think there's any bug here. |