Under the hood
Useful1 Signal1
Linux user-namespace mapping parsing was split out and now returns full host ranges.
What's wrong with this entry?
Anonymous. No account, no email.
What
The code that reads Linux user-namespace ID mappings was split into a pure parser over the file text, which validates all three columns and returns the inner start, host start and count for each range instead of resolving a single fallback ID itself.
Details
- Callers can now see where inner IDs land on the host, which the old reader discarded.
Evidence
t.push({ innerStart: o, hostStart: s, count: u });
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.236
macOS sandbox re-applies read and delete denials inside writable folders
Both mention sandbox
-
v2.1.236
Sandbox proxy no longer writes to sockets that have gone away
Both mention sandbox
-
v2.1.236
IPv6 hosts through the proxy
Both mention sandbox