Harden libcontainer's user-namespace ID mapping handling so malformed maps are rejected before they can…
Harden libcontainer's user-namespace ID mapping handling so malformed maps are rejected before they can…: a task in MiMo-V2.6-RL-harbor-code: MiMo-V2.6-RL Code (Harbor) (Harbor dataset). Treat each UID and GID mapping as a half-open pair of ranges: ContainerID, ContainerID+Size) maps to HostID…
The task
Treat each UID and GID mapping as a half-open pair of ranges: [ContainerID, ContainerID+Size) maps to [HostID, HostID+Size). When a config contains NEWUSER, both the UID and GID mapping lists must be non-empty and each must map container ID 0. Every entry must have non-negative starts and a positive size. Both…
Part of FineEnvs/MiMo-V2.6-RL-harbor-code.