Skip to content

Commit 7aa7dcd

Browse files
committed
Merge pull request #347 from vbatts/user-name
config: clarify the uname mapping
2 parents b37fe27 + 95f0c67 commit 7aa7dcd

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

config.md

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -104,13 +104,20 @@ For more information about SELinux, see [Selinux documentation](http://selinuxp
104104
* **`noNewPrivileges`** (bool, optional) setting `noNewPrivileges` to true prevents the processes in the container from gaining additional privileges.
105105
[The kernel doc](https://www.kernel.org/doc/Documentation/prctl/no_new_privs.txt) has more information on how this is achieved using a prctl system call.
106106

107+
### User
108+
107109
The user for the process is a platform-specific structure that allows specific control over which user the process runs as.
110+
111+
#### Linux User
112+
108113
For Linux-based systems the user structure has the following fields:
109114

110115
* **`uid`** (int, required) specifies the user id.
111116
* **`gid`** (int, required) specifies the group id.
112117
* **`additionalGids`** (array of ints, optional) specifies additional group ids to be added to the process.
113118

119+
_Note: symbolic name for uid and gid, such as uname and gname respectively, are left to upper levels to derive (i.e. `/etc/passwd` parsing, NSS, etc)_
120+
114121
*Example (Linux)*
115122

116123
```json

0 commit comments

Comments
 (0)