From 2e276b1d9b475335bd4c10648cce65d4391181c3 Mon Sep 17 00:00:00 2001 From: Lennart Poettering Date: Tue, 23 Jan 2018 21:16:59 +0100 Subject: [PATCH] UIDS-GIDS.md: explicitly mention one more user of the overflowuid File systems with only 16bit UID support (i.e. old ext2) also use the overflowuid to map users they can't map. Briefly mention this. --- UIDS-GIDS.md | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/UIDS-GIDS.md b/UIDS-GIDS.md index 71e91fa..e19cc88 100644 --- a/UIDS-GIDS.md +++ b/UIDS-GIDS.md @@ -17,13 +17,14 @@ i.e. 0…4294967295. However, four UIDs are special on Linux: 1. 0 → The `root` super-user 2. 65534 → The `nobody` UID, also called the "overflow" UID or similar. It's - where various subsystems map unmappable users to, for example NFS or user - namespacing. (The latter can be changed with a sysctl during runtime, but - that's not supported on `systemd`. If you do change it you void your - warranty.) Because Fedora is a bit confused the `nobody` user is called - `nfsnobody` there (and they have a different `nobody` user at UID 99). I - hope this will be corrected eventually though. (Also, some distributions - call the `nobody` group `nogroup`. I wish they didn't.) + where various subsystems map unmappable users to, for example file systems + only supporting 16bit UIDs, NFS or user namespacing. (The latter can be + changed with a sysctl during runtime, but that's not supported on + `systemd`. If you do change it you void your warranty.) Because Fedora is a + bit confused the `nobody` user is called `nfsnobody` there (and they have a + different `nobody` user at UID 99). I hope this will be corrected eventually + though. (Also, some distributions call the `nobody` group `nogroup`. I wish + they didn't.) 3. 4294967295, aka "32bit `(uid_t) -1`" → This UID is not a valid user ID, as `setresuid()`, `chown()` and friends treat -1 as a special request to not -- 2.7.4