Skip to content

Commit e662e5c

Browse files
committed
Linux devices: uid/gid relative to container
It was not clear in the spec if the uid and gid owning a Linux device were relative to the runtime namespace or to the container namespace. This patch clarifies that. Fixes #957 Signed-off-by: Alban Crequy <[email protected]>
1 parent 6be516e commit e662e5c

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

config-linux.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -122,8 +122,8 @@ Each entry has the following structure:
122122
* **`major, minor`** *(int64, REQUIRED unless `type` is `p`)* - [major, minor numbers][devices] for the device.
123123
* **`fileMode`** *(uint32, OPTIONAL)* - file mode for the device.
124124
You can also control access to devices [with cgroups](#device-whitelist).
125-
* **`uid`** *(uint32, OPTIONAL)* - id of device owner.
126-
* **`gid`** *(uint32, OPTIONAL)* - id of device group.
125+
* **`uid`** *(uint32, OPTIONAL)* - id of device owner in the [container namespace](glossary.md#container-namespace).
126+
* **`gid`** *(uint32, OPTIONAL)* - id of device group in the [container namespace](glossary.md#container-namespace).
127127

128128
The same `type`, `major` and `minor` SHOULD NOT be used for multiple devices.
129129

0 commit comments

Comments
 (0)