From b58c572f320cbed3ccff86536b2c8c03fc82f804 Mon Sep 17 00:00:00 2001 From: Tonis Tiigi Date: Mon, 25 Jan 2016 17:57:42 -0800 Subject: [PATCH] Chown stdio with proper user If user namespace is used we should chown with a remapped ID. Signed-off-by: Tonis Tiigi --- linux/linux.go | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/linux/linux.go b/linux/linux.go index befea25c2..b064677e3 100644 --- a/linux/linux.go +++ b/linux/linux.go @@ -414,7 +414,11 @@ func (r *libcontainerRuntime) Create(id, bundlePath, consolePath string) (runtim return nil, nil, err } } else { - i, err := process.InitializeIO(int(spec.Process.User.UID)) + uid, err := config.HostUID() + if err != nil { + return nil, nil, err + } + i, err := process.InitializeIO(uid) if err != nil { return nil, nil, err } @@ -449,7 +453,11 @@ func (r *libcontainerRuntime) StartProcess(ci runtime.Container, p specs.Process return nil, nil, err } } else { - i, err := process.InitializeIO(int(p.User.UID)) + uid, err := c.c.Config().HostUID() + if err != nil { + return nil, nil, err + } + i, err := process.InitializeIO(uid) if err != nil { return nil, nil, err }