Skip to content

Ensure that exec sessions inherit supplemental groups #5349

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged

Conversation

mheon
Copy link
Member

@mheon mheon commented Feb 27, 2020

This corrects a regression from Podman 1.4.x where container exec sessions inherited supplemental groups from the container, iff the exec session did not specify a user.

@mheon
Copy link
Member Author

mheon commented Feb 27, 2020

Still needs tests

@openshift-ci-robot
Copy link
Collaborator

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: mheon

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci-robot openshift-ci-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Feb 27, 2020
@mheon mheon force-pushed the ensure_exec_suppgroups branch from 8ee0bbd to e4be545 Compare February 27, 2020 22:30
@mheon
Copy link
Member Author

mheon commented Feb 27, 2020

Added a test

@mheon
Copy link
Member Author

mheon commented Feb 28, 2020

[+0914s] Error: container_linux.go:345: starting container process caused "exec: \"groupAdd\": executable file not found in $PATH": OCI runtime command not found error

I'm seeing this error in #5270 as well

This corrects a regression from Podman 1.4.x where container exec
sessions inherited supplemental groups from the container, iff
the exec session did not specify a user.

Signed-off-by: Matthew Heon <[email protected]>
@mheon mheon force-pushed the ensure_exec_suppgroups branch from e4be545 to b41c864 Compare February 28, 2020 16:33
@mheon
Copy link
Member Author

mheon commented Feb 28, 2020

Nevermind, silly mistake. groupAdd is not a valid command, groupadd is.

@rhatdan
Copy link
Member

rhatdan commented Feb 28, 2020

LGTM
@giuseppe PTAL

@mheon
Copy link
Member Author

mheon commented Feb 28, 2020

It's green
@baude @vrothberg @TomSweeneyRedHat PTAL and merge

@TomSweeneyRedHat
Copy link
Member

LGTM

@TomSweeneyRedHat
Copy link
Member

/lgtm

@openshift-ci-robot openshift-ci-robot added the lgtm Indicates that a PR is ready to be merged. label Feb 28, 2020
@openshift-merge-robot openshift-merge-robot merged commit 742093c into containers:master Feb 28, 2020
@github-actions github-actions bot added the locked - please file new issue/PR Assist humans wanting to comment on an old issue or PR with locked comments. label Sep 25, 2023
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Sep 25, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. locked - please file new issue/PR Assist humans wanting to comment on an old issue or PR with locked comments.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants