diff options
| author | Matthew Heon <matthew.heon@pm.me> | 2020-02-27 16:08:29 -0500 |
|---|---|---|
| committer | Matthew Heon <matthew.heon@pm.me> | 2020-02-28 11:32:56 -0500 |
| commit | b41c864d569357a102ee2335a4947e59e5e2b08a (patch) | |
| tree | 8be00fe617420b47ec2960f540890baaa92c32ca /libpod/container_api.go | |
| parent | 25d29f959a16a881066727481cbbc0bd2d18c784 (diff) | |
| download | podman-b41c864d569357a102ee2335a4947e59e5e2b08a.tar.gz podman-b41c864d569357a102ee2335a4947e59e5e2b08a.tar.bz2 podman-b41c864d569357a102ee2335a4947e59e5e2b08a.zip | |
Ensure that exec sessions inherit supplemental groups
This corrects a regression from Podman 1.4.x where container exec
sessions inherited supplemental groups from the container, iff
the exec session did not specify a user.
Signed-off-by: Matthew Heon <matthew.heon@pm.me>
Diffstat (limited to 'libpod/container_api.go')
| -rw-r--r-- | libpod/container_api.go | 5 |
1 files changed, 0 insertions, 5 deletions
diff --git a/libpod/container_api.go b/libpod/container_api.go index d612341bc..dabbe27dc 100644 --- a/libpod/container_api.go +++ b/libpod/container_api.go @@ -270,11 +270,6 @@ func (c *Container) Exec(tty, privileged bool, env map[string]string, cmd []stri } }() - // if the user is empty, we should inherit the user that the container is currently running with - if user == "" { - user = c.config.User - } - opts := new(ExecOptions) opts.Cmd = cmd opts.CapAdd = capList |