diff options
author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-27 12:50:00 +0000 |
---|---|---|
committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-27 12:50:00 +0000 |
commit | 333f7ecfa3e040191c66b2b92f6c117ca2cbac1d (patch) | |
tree | 178a8f140927896970f47930dae9213161268f10 /man/man1/newuidmap.1 | |
parent | Initial commit. (diff) | |
download | shadow-333f7ecfa3e040191c66b2b92f6c117ca2cbac1d.tar.xz shadow-333f7ecfa3e040191c66b2b92f6c117ca2cbac1d.zip |
Adding upstream version 1:4.8.1.upstream/1%4.8.1upstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to '')
-rw-r--r-- | man/man1/newuidmap.1 | 97 |
1 files changed, 97 insertions, 0 deletions
diff --git a/man/man1/newuidmap.1 b/man/man1/newuidmap.1 new file mode 100644 index 0000000..75363d0 --- /dev/null +++ b/man/man1/newuidmap.1 @@ -0,0 +1,97 @@ +'\" t +.\" Title: newuidmap +.\" Author: Eric Biederman +.\" Generator: DocBook XSL Stylesheets v1.79.1 <http://docbook.sf.net/> +.\" Date: 01/23/2020 +.\" Manual: User Commands +.\" Source: shadow-utils 4.8.1 +.\" Language: English +.\" +.TH "NEWUIDMAP" "1" "01/23/2020" "shadow\-utils 4\&.8\&.1" "User Commands" +.\" ----------------------------------------------------------------- +.\" * Define some portability stuff +.\" ----------------------------------------------------------------- +.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ +.\" http://bugs.debian.org/507673 +.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html +.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ +.ie \n(.g .ds Aq \(aq +.el .ds Aq ' +.\" ----------------------------------------------------------------- +.\" * set default formatting +.\" ----------------------------------------------------------------- +.\" disable hyphenation +.nh +.\" disable justification (adjust text to left margin only) +.ad l +.\" ----------------------------------------------------------------- +.\" * MAIN CONTENT STARTS HERE * +.\" ----------------------------------------------------------------- +.SH "NAME" +newuidmap \- set the uid mapping of a user namespace +.SH "SYNOPSIS" +.HP \w'\fBnewuidmap\fR\ 'u +\fBnewuidmap\fR \fIpid\fR \fIuid\fR \fIloweruid\fR \fIcount\fR [\fIuid\fR\ \fIloweruid\fR\ \fIcount\fR\ [\ \fI\&.\&.\&.\fR\ ]] +.SH "DESCRIPTION" +.PP +The +\fBnewuidmap\fR +sets +/proc/[pid]/uid_map +based on its command line arguments and the uids allowed in +/etc/subuid\&. Note that the root user is not exempted from the requirement for a valid +/etc/subuid +entry\&. +.PP +After the pid argument, +\fBnewuidmap\fR +expects sets of 3 integers: +.PP +uid +.RS 4 +Beginning of the range of UIDs inside the user namespace\&. +.RE +.PP +loweruid +.RS 4 +Beginning of the range of UIDs outside the user namespace\&. +.RE +.PP +count +.RS 4 +Length of the ranges (both inside and outside the user namespace)\&. +.RE +.PP +\fBnewuidmap\fR +verifies that the caller is the owner of the process indicated by +\fBpid\fR +and that for each of the above sets, each of the UIDs in the range [loweruid, loweruid+count] is allowed to the caller according to +/etc/subuid +before setting +/proc/[pid]/uid_map\&. +.PP +Note that newuidmap may be used only once for a given process\&. +.SH "OPTIONS" +.PP +There currently are no options to the +\fBnewuidmap\fR +command\&. +.SH "FILES" +.PP +/etc/subuid +.RS 4 +List of user\*(Aqs subordinate user IDs\&. +.RE +.PP +/proc/[pid]/uid_map +.RS 4 +Mapping of uids from one between user namespaces\&. +.RE +.SH "SEE ALSO" +.PP +\fBlogin.defs\fR(5), +\fBnewusers\fR(8), +\fBsubuid\fR(5), +\fBuseradd\fR(8), +\fBusermod\fR(8), +\fBuserdel\fR(8)\&. |