util: when joining a namespace make sure to reset all uids to 0 after

the transition

diff --git a/src/shared/util.c b/src/shared/util.c
index 66276aa54e3925aa6c21225bd39f71a6616de4ec..b5ffaa1c3ccc0f6bff8cc7e5bfdf728a019efa3d 100644 (file)
--- a/src/shared/util.c
+++ b/src/shared/util.c
@@ -6022,5 +6022,11 @@ int namespace_enter(int namespace_fd, int root_fd) {
         if (chroot(".") < 0)
                 return -errno;
 
+        if (setresgid(0, 0, 0) < 0)
+                return -errno;
+
+        if (setresuid(0, 0, 0) < 0)
+                return -errno;
+
         return 0;
 }