From f2314928f7961c5bec80f451f8610a0a57f62453 Mon Sep 17 00:00:00 2001 From: "W. Trevor King" Date: Thu, 28 Sep 2017 12:54:44 -0700 Subject: [PATCH] config-linux: RFC 2119 MUST for absolute linux.namespaces[].path The old language is from 72cbff67 (config-linux.md: clearly require absolute path for namespace, 2017-03-10, #720), but without RFC 2119 language in the absolute path wording, it's not a compliance requirement (per spec.md's "compliant" definition). This commit adjusts the language to bring it in line with our current wording for maskedPaths and readonlyPaths, which we've had since 25f44dd0 ( config-linux: fix format and definitely require value of masked and readonly paths, 2016-09-30, #587). Signed-off-by: W. Trevor King --- config-linux.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/config-linux.md b/config-linux.md index a9425cba9..f73d893c9 100644 --- a/config-linux.md +++ b/config-linux.md @@ -35,7 +35,8 @@ The following parameters can be specified to set up namespaces: * **`user`** the container will be able to remap user and group IDs from the host to local users and groups within the container. * **`cgroup`** the container will have an isolated view of the cgroup hierarchy. -* **`path`** *(string, OPTIONAL)* - an absolute path to namespace file in the [runtime mount namespace](glossary.md#runtime-namespace). +* **`path`** *(string, OPTIONAL)* - namespace file. + This value MUST be an absolute path in the [runtime mount namespace](glossary.md#runtime-namespace). The runtime MUST place the container process in the namespace associated with that `path`. The runtime MUST [generate an error](runtime.md#errors) if `path` is not associated with a namespace of type `type`.