From f0ad57190930e589d4d0cc66b3462be28d966f3f Mon Sep 17 00:00:00 2001 From: YEVHENII SHCHERBINA Date: Fri, 10 Oct 2025 03:06:38 +0000 Subject: [PATCH] fix: update user mapping --- jail/linux.go | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/jail/linux.go b/jail/linux.go index 440f0ae..a3b66bf 100644 --- a/jail/linux.go +++ b/jail/linux.go @@ -11,6 +11,7 @@ import ( "syscall" "time" + "github.com/coder/boundary/util" "golang.org/x/sys/unix" ) @@ -71,13 +72,18 @@ func (l *LinuxJail) Command(command []string) *exec.Cmd { cmd.Stdout = os.Stdout cmd.Stdin = os.Stdin + l.logger.Debug("os.Getuid()", "os.Getuid()", os.Getuid()) + _, uid, gid, _, _ := util.GetUserInfo() + cmd.SysProcAttr = &syscall.SysProcAttr{ Cloneflags: syscall.CLONE_NEWUSER | syscall.CLONE_NEWNET, UidMappings: []syscall.SysProcIDMap{ - {ContainerID: 0, HostID: os.Getuid(), Size: 1}, + {ContainerID: 0, HostID: 0, Size: 1}, + {ContainerID: uid, HostID: uid, Size: 1}, }, GidMappings: []syscall.SysProcIDMap{ - {ContainerID: 0, HostID: os.Getgid(), Size: 1}, + {ContainerID: 0, HostID: 0, Size: 1}, + {ContainerID: gid, HostID: gid, Size: 1}, }, }