Skip to content

Commit

Permalink
config: clarify the uname mapping
Browse files Browse the repository at this point in the history
Closes opencontainers#38

Signed-off-by: Vincent Batts <vbatts@hashbangbash.com>
  • Loading branch information
vbatts authored and Ma Shimiao committed Aug 18, 2016
1 parent a2da641 commit f7a77a2
Showing 1 changed file with 7 additions and 0 deletions.
7 changes: 7 additions & 0 deletions config.md
Original file line number Diff line number Diff line change
Expand Up @@ -104,13 +104,20 @@ For more information about SELinux, see [Selinux documentation](http://selinuxp
* **`noNewPrivileges`** (bool, optional) setting `noNewPrivileges` to true prevents the processes in the container from gaining additional privileges.
[The kernel doc](https://www.kernel.org/doc/Documentation/prctl/no_new_privs.txt) has more information on how this is achieved using a prctl system call.

### User

The user for the process is a platform-specific structure that allows specific control over which user the process runs as.

#### Linux User

For Linux-based systems the user structure has the following fields:

* **`uid`** (int, required) specifies the user id.
* **`gid`** (int, required) specifies the group id.
* **`additionalGids`** (array of ints, optional) specifies additional group ids to be added to the process.

_Note: symbolic name for uid and gid, such as uname and gname respectively, are left to upper levels to derive (i.e. `/etc/passwd` parsing, NSS, etc)_

*Example (Linux)*

```json
Expand Down

0 comments on commit f7a77a2

Please sign in to comment.