aboutsummaryrefslogtreecommitdiff
path: root/pkg/specgen
diff options
context:
space:
mode:
authorOpenShift Merge Robot <openshift-merge-robot@users.noreply.github.com>2022-09-05 00:16:51 +0200
committerGitHub <noreply@github.com>2022-09-05 00:16:51 +0200
commit5c7f28336171f0a5137edd274e45608120d31289 (patch)
treee4717863dde464450a6ffdb86201ed40d2f8e8b7 /pkg/specgen
parentb506f6ebb7e49e054c3b45c481109637cbd6b20f (diff)
parentd82a41687e614d9ac8b2d169dee47fe226835e4c (diff)
downloadpodman-5c7f28336171f0a5137edd274e45608120d31289.tar.gz
podman-5c7f28336171f0a5137edd274e45608120d31289.tar.bz2
podman-5c7f28336171f0a5137edd274e45608120d31289.zip
Merge pull request #15618 from mheon/add_group_to_addtlgroups
Add container GID to additional groups
Diffstat (limited to 'pkg/specgen')
-rw-r--r--pkg/specgen/namespaces.go2
1 files changed, 2 insertions, 0 deletions
diff --git a/pkg/specgen/namespaces.go b/pkg/specgen/namespaces.go
index 8cc0fe6a9..b6bbee868 100644
--- a/pkg/specgen/namespaces.go
+++ b/pkg/specgen/namespaces.go
@@ -510,6 +510,7 @@ func SetupUserNS(idmappings *storage.IDMappingOptions, userns Namespace, g *gene
idmappings = mappings
g.SetProcessUID(uint32(uid))
g.SetProcessGID(uint32(gid))
+ g.AddProcessAdditionalGid(uint32(gid))
user = fmt.Sprintf("%d:%d", uid, gid)
if err := privateUserNamespace(idmappings, g); err != nil {
return user, err
@@ -522,6 +523,7 @@ func SetupUserNS(idmappings *storage.IDMappingOptions, userns Namespace, g *gene
idmappings = mappings
g.SetProcessUID(uint32(uid))
g.SetProcessGID(uint32(gid))
+ g.AddProcessAdditionalGid(uint32(gid))
user = fmt.Sprintf("%d:%d", uid, gid)
if err := privateUserNamespace(idmappings, g); err != nil {
return user, err