* gnu/packages/aux-files/run-in-namespace.c (write_id_map) (disallow_setgroups): New functions. (main): Use 'clone' via 'syscall' instead of 'fork' followed by 'unshare'. Add calls to 'disallow_setgroups' and 'write_id_map' in the parent process. |
||
---|---|---|
.. | ||
bootloader | ||
build | ||
packages | ||
services | ||
system | ||
tests | ||
artwork.scm | ||
bootloader.scm | ||
local.mk | ||
packages.scm | ||
services.scm | ||
system.scm | ||
tests.scm |