From 5a0be6fa203273d1e4ab06a206eaffeca5724533 Mon Sep 17 00:00:00 2001
From: Rahat Mahmood <rahat@google.com>
Date: Thu, 8 Nov 2018 11:08:41 -0800
Subject: Create stubs for syscalls upto Linux 4.4.
Create syscall stubs for missing syscalls upto Linux 4.4 and advertise
a kernel version of 4.4.
PiperOrigin-RevId: 220667680
Change-Id: Idbdccde538faabf16debc22f492dd053a8af0ba7
---
pkg/sentry/kernel/auth/user_namespace.go | 5 +----
1 file changed, 1 insertion(+), 4 deletions(-)
(limited to 'pkg/sentry/kernel/auth')
diff --git a/pkg/sentry/kernel/auth/user_namespace.go b/pkg/sentry/kernel/auth/user_namespace.go
index 5bb9c44c0..30957bb9a 100644
--- a/pkg/sentry/kernel/auth/user_namespace.go
+++ b/pkg/sentry/kernel/auth/user_namespace.go
@@ -49,10 +49,7 @@ type UserNamespace struct {
gidMapFromParent idMapSet
gidMapToParent idMapSet
- // TODO: Consider supporting disabling setgroups(2), which "was
- // added in Linux 3.19, but was backported to many earlier stable kernel
- // series, because it addresses a security issue" - user_namespaces(7). (It
- // was not backported to 3.11.10, which we are currently imitating.)
+ // TODO: Support disabling setgroups(2).
}
// NewRootUserNamespace returns a UserNamespace that is appropriate for a
--
cgit v1.2.3