containers/podman.git - forked from: https://github.com/containers/podman.git

	Commit message (Collapse)	Author	Age
*	create, rootless: join the userns of ns:PATH	Giuseppe Scrivano	2018-09-21
\| \| \| \| \| \| \|	Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com> Closes: #1507 Approved by: rhatdan
*	rootless: unexport GetUserNSForPid	Giuseppe Scrivano	2018-08-29
\| \| \| \| \| \| \|	Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com> Closes: #1371 Approved by: rhatdan
*	rootless: add new function to join existing namespace	Giuseppe Scrivano	2018-08-29
\| \| \| \| \| \| \|	Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com> Closes: #1371 Approved by: rhatdan
*	rootless: exec handle processes that create an user namespace	Giuseppe Scrivano	2018-08-26
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	Manage the case where the main process of the container creates and joins a new user namespace. In this case we want to join only the first child in the new hierarchy, which is the user namespace that was used to create the container. Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com> Closes: #1331 Approved by: rhatdan
*	rootless: fix exec	Giuseppe Scrivano	2018-08-26
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	We cannot re-exec into a new user namespace to gain privileges and access an existing as the new namespace is not the owner of the existing container. "unshare" is used to join the user namespace of the target container. The current implementation assumes that the main process of the container didn't create a new user namespace. Since in the setup phase we are not running with euid=0, we must skip the setup for containers/storage. Closes: https://github.com/containers/libpod/issues/1329 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com> Closes: #1331 Approved by: rhatdan
*	rootless: correctly propagate the exit status from the container	Giuseppe Scrivano	2018-07-13
\| \| \| \|	Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
*	more changes to compile darwin	baude	2018-07-05
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	this should represent the last major changes to get darwin to compile. again, the purpose here is to get darwin to compile so that we can eventually implement a ci task that would protect against regressions for darwin compilation. i have left the manual darwin compilation largely static still and in fact now only interject (manually) two build tags to assist with the build. trevor king has great ideas on how to make this better and i will defer final implementation of those to him. Signed-off-by: baude <bbaude@redhat.com> Closes: #1047 Approved by: rhatdan
*	changes to allow for darwin compilation	baude	2018-06-29
	Signed-off-by: baude <bbaude@redhat.com> Closes: #1015 Approved by: baude