summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAlexander Larsson <alexl@redhat.com>2019-11-27 09:25:25 +0100
committerAlexander Larsson <alexl@redhat.com>2019-11-27 09:25:25 +0100
commitd3c1c74c97b9b1ead622755b553d4e6015e6660c (patch)
tree5d95cff94e76992546337960495cc90ae125ffe3
parent39936535564a26abe7aa46cd23af4effab2fcdce (diff)
downloadbubblewrap-d3c1c74c97b9b1ead622755b553d4e6015e6660c.tar.gz
Drop cap bounding set also in --userns case
This is the same as the --unshare-user case.
-rw-r--r--bubblewrap.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/bubblewrap.c b/bubblewrap.c
index 9fa836d..1b75a48 100644
--- a/bubblewrap.c
+++ b/bubblewrap.c
@@ -805,7 +805,7 @@ static void
switch_to_user_with_privs (void)
{
/* If we're in a new user namespace, we got back the bounding set, clear it again */
- if (opt_unshare_user)
+ if (opt_unshare_user || opt_userns_fd != -1)
drop_cap_bounding_set (FALSE);
if (!is_privileged)