Files
systemd/src/basic
Daan De Meyer 6c2d437585 nsresourced: Allow operations outside transient UID/GID ranges
The purpose of the userns-restrict BPF-LSM program is to prevent the
transient ranges leaking to disk, so let's allow operations outside the
transient UID ranges, even if the mount is not allowlisted.

This is preparation for the next commits where we'll add support for mapping
the current user and the foreign UID range into the user namespaces provisioned
by nsresourced. Operations creating files/directories as these UIDs/GIDs should
not need the corresponding mount to be allowlisted with nsresourced.
2026-02-24 18:29:37 +01:00
..
…
…
2026-01-06 10:34:02 +01:00
2025-12-15 08:50:13 +09:00
2025-09-19 14:46:55 +02:00
2026-02-05 14:14:40 +01:00
2025-12-15 08:50:13 +09:00
2025-09-19 16:46:07 +02:00
2025-12-15 08:50:13 +09:00
…
…
…
…
2026-01-21 08:35:31 +09:00
2025-07-26 05:00:02 +09:00
2026-02-05 16:18:35 +01:00
…
2025-12-15 08:50:13 +09:00
…
…
…
…
2025-12-15 08:50:13 +09:00
…
2025-12-15 08:50:13 +09:00
2026-02-05 14:14:40 +01:00