GNU bug report logs - #72337
Add /etc/subuid and /etc/subgid support

Previous Next

Package: guix-patches;

Reported by: paul <goodoldpaul <at> autistici.org>

Date: Sun, 28 Jul 2024 15:26:01 UTC

Severity: normal

Done: Ludovic Courtès <ludo <at> gnu.org>

Bug is archived. No further changes may be made.

Full log


View this message in rfc822 format

From: paul <goodoldpaul <at> autistici.org>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: 72337 <at> debbugs.gnu.org
Subject: [bug#72337] Add /etc/subuid and /etc/subgid support
Date: Tue, 8 Oct 2024 00:35:10 +0200
[Message part 1 (text/plain, inline)]
Hi Ludo’ ,

I think I have addressed your comments. I have now implemented two 
separate code paths: - when the request is specific (i.e. the subid 
range has a start) we can traverse the tree logarithmically

- when the request is generic (i.e. the subid range does not have a 
start) the search is linear since all the nodes have to be visited worst 
case to avoid leaving empty spaces interleaved, that could actually 
evade requests


As for estimating the size of the input, I'm not sure I know enough to 
answer this. My reasoning has been: in general the number of possible 
subids (i.e. %subordinate-id-max - %subordinate-id-min) is huge. The use 
case I have in mind for subids is rootless podman, so how many users in 
average need to use rootless containers on a system and how many subids 
are they to request in average are two very good questions I don't know 
how to answer yet, or where I could find data for. Let me know if you 
have any idea.


Please let me know if this v5 looks ok, thank you a lot for your help. 
giacomo
[Message part 2 (text/html, inline)]

This bug report was last modified 155 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.