Hi,
I am currently testing running Docker with userns-remap and volume mount.
Here is an example of my /etc/subuid
file :
username:100000:65536
dockremap:165536:65536
This allows my users to mount any file with --- --- r--
(read for others) file permissions. This leads to security issues : any user on my server can access the files with read permissions.
Is there a way to run the daemon in order that files are mounted relative to the user/group running it ?
So I can mount r-- --- ---
or r-- r-- ---
files ?
Thanks,