Add comment

This commit is contained in:
Eelco Dolstra 2016-12-22 17:38:42 +01:00
parent 2d801bf0a4
commit 786ee585b8
No known key found for this signature in database
GPG key ID: 8170B4726D7198DE

View file

@ -2165,7 +2165,8 @@ void DerivationGoal::startBuilder()
namespace, we can't drop additional groups; they will namespace, we can't drop additional groups; they will
be mapped to nogroup in the child namespace. There does be mapped to nogroup in the child namespace. There does
not seem to be a workaround for this. (But who can tell not seem to be a workaround for this. (But who can tell
from reading user_namespaces(7)?)*/ from reading user_namespaces(7)?)
See also https://lwn.net/Articles/621612/. */
if (getuid() == 0 && setgroups(0, 0) == -1) if (getuid() == 0 && setgroups(0, 0) == -1)
throw SysError("setgroups failed"); throw SysError("setgroups failed");