tree 93f7dd4254c6b7c28b275dd077b43e8a32ff37a7
parent 37e4dc5ae842afa03849a47b123345906fdd81a2
author Arfrever Frehtes Taifersar Arahesis <Arfrever@Apache.Org> 1548087243 +0100
committer Zac Medico <zmedico@gentoo.org> 1548218849 -0800
gpgsig -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2
 
 iQKTBAABCgB9FiEE8OgXaltWzqgSupCu0HX7jBBKPSAFAlxH8epfFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEYw
 RTgxNzZBNUI1NkNFQTgxMkJBOTBBRUQwNzVGQjhDMTA0QTNEMjAACgkQ0HX7jBBK
 PSDmnQ/+NGQHA2Gl+4C1ABnSW1Y5fGkCQrQwGi/M5adR/hsJYEo6PunANn7Q1EVO
 n3qiWLpVkXP/Fs4j5uEgU/owZG8ILsygpoMEhEpLw/KvuFrX2MNYNzR8Qm92VKHE
 Txpu9Ts5jua+VrNkbd6Yz8Drnk68eG8i/OSKgeFikT4oAiLhQ1EZuAx7k5H7qbjp
 wAlf3bzOxgSzo9VvR1GII9+XLC9+3jREuKcYF1zU1ASvi8qUTDYuiwfyd5poHL9k
 qNw97B/vWynXOm/eDidBcPDhJ51zyikVgHpSdoBaiIY2ncH/qLvh/skOiRCwWgHF
 UB+ojskUOw8vLfIJNP5vFmOaj/JhFqxZVITiOwfowoWuqOxRd67rA9yDHnN24qGl
 hmI06DIIECGWaTN8xokglg6DWix1URU5z5J7vhXqCvXdshlfNzex4H6iQ+XJ80lV
 QManpugkRnme40NPugCj25WPgRTMkPfmkJZjC8V8kun2e2Gnrr4g5N8b9unENRfH
 GvMpkqNuWpF674z93bfXYjY6q9Fyi1X+9tEZ3grm8XDM1MRz1wgPb9K04Up9wobP
 0w5yD9cmQWauolMY4DiVzypAWf7jYDOgjvWiiVvHfzRF0jxWG4v6EnbU8vL//dFu
 yh+Sb3+Hb98rHpj+BPNdXn+qJzv2TD2UIehDpC0ZYdOZngwKYX0=
 =ze6j
 -----END PGP SIGNATURE-----

pid-sandbox: run pid-ns-init as root (bug 675868)

Drop permissions only for subprocess of pid-ns-init but not pid-ns-init
itself. With FEATURES="pid-sandbox userpriv", pid-ns-init should be
run with unchanged permissions (usually UID=0, GID=0).

Bug: https://bugs.gentoo.org/675868
Signed-off-by: Arfrever Frehtes Taifersar Arahesis <Arfrever@Apache.Org>
Signed-off-by: Zac Medico <zmedico@gentoo.org>