Skip to content

Commit

Permalink
Correct some linguistic irregularities
Browse files Browse the repository at this point in the history
  • Loading branch information
younghojan committed Jun 12, 2024
1 parent d3daf84 commit fb3ef0b
Show file tree
Hide file tree
Showing 2 changed files with 6 additions and 5 deletions.
4 changes: 2 additions & 2 deletions benchexec/container.py
Original file line number Diff line number Diff line change
Expand Up @@ -118,8 +118,8 @@
_ERROR_MSG_USER_NS_RESTRICTION = (
"Unprivileged user namespaces forbidden on this system, please "
"enable them with 'sysctl -w kernel.apparmor_restrict_unprivileged_userns=0'. "
"Ubuntu disable it by default since 24.04, refer to "
"https://ubuntu.com/blog/whats-new-in-security-for-ubuntu-24-04-lts "
"Ubuntu disable them by default since 24.04, refer to "
"https://ubuntu.com/blog/ubuntu-23-10-restricted-unprivileged-user-namespaces "
"for more information."
)

Expand Down
7 changes: 4 additions & 3 deletions doc/INSTALL.md
Original file line number Diff line number Diff line change
Expand Up @@ -169,9 +169,10 @@ that are not usable on all distributions by default:
On CentOS it can be necessary to enable this feature with
`sudo sysctl -w user.max_user_namespaces=10000` or a respective entry
in `/etc/sysctl.conf` (the exact value is not important).
On Ubuntu 24.04 (or newer versions), execute `sysctl -w kernel.apparmor_restrict_unprivileged_userns=0`
to enable it. This setting will be reset upon reboot. To apply a persistent setting, create a new file
at `/etc/sysctl.d/60-apparmor-namespace.conf` with `kernel.apparmor_restrict_unprivileged_userns=0`.
On Ubuntu 24.04 (or newer versions) it can be necessary to enable this feature with
`sysctl -w kernel.apparmor_restrict_unprivileged_userns=0` or a respective entry
in `/etc/sysctl.conf`.


- **Unprivileged Overlay Filesystem**: This is only available since Linux 5.11
(kernel option `CONFIG_OVERLAY_FS`),
Expand Down

0 comments on commit fb3ef0b

Please sign in to comment.