NAME¶

newgidmap - set the gid mapping of a user namespace

SYNOPSIS¶

newgidmap [options] pid gid lowergid count [gid lowergid count...]

DESCRIPTION¶

The newgidmap command sets the gid mapping of the user namespace of the process pid by writing to /proc/pid/gid_map, using the ranges given on the command line.

This implementation delegates the task via the varlink protocol to newidmapd(8), which performs the privileged operation on its behalf.

After the pid argument, the command expects one or more sets of three integers:

gid

lowergid

count

The mappings are only applied if the caller is the owner of the process pid and every GID in the requested range lowergid to lowergid+count is allowed for the caller according to subgid(5). A process is always allowed to map its own GID.

newgidmap can only be used once per process, as the kernel allows the gid mapping of a user namespace to be written only a single time.

OPTIONS¶

-h, --help

-v, --version

FILES¶

/etc/subgid

/proc/[pid]/gid_map

SEE ALSO¶

newgidmap(1), newidmapd(8), subuid(5), subgid(5), user_namespaces(7)