Harden libcontainer's user-namespace ID mapping handling so malformed maps are rejected before they can…
Harden libcontainer's user-namespace ID mapping handling so malformed maps are rejected before they can…: a task in MiMo-V2.6-RL-oss: Agentic RL Environments (MiMo RL release). Today the public configuration validator largely checks only whether mappings accompany a user namespace, while the…
The task
Today the public configuration validator largely checks only whether mappings accompany a user namespace, while the HostUID/HostGID helpers perform arithmetic directly on int values. Overlapping or overflowing ranges can therefore be ambiguous or translate to a negative host…
Part of XiaomiMiMo/MiMo-V2.6-RL-oss.