From nobody Tue Aug 12 12:36:43 2025 X-Original-To: bugs@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4c1WGM3hDrz64gg4 for ; Tue, 12 Aug 2025 12:36:43 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R10" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4c1WGM2xxWz3FK4 for ; Tue, 12 Aug 2025 12:36:43 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1755002203; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=WlmRvrNnIA0DY9Ntos0dDpQIQnK9wM46sZykNLHEz3o=; b=BtCVewXczYUVN8BGNPBIkJg8Cx6rafuhmd2qT6NauSlXN7+r/s76BKCFbfZqN3Vhz9crmE UIxhn+wXbK0qhJfQ7efbW7Gy/+mtW5IkGas+Z6AZBUS58L5KKic0d9d355ChFME+7cWwkz 4pIZ2iHwwMzZJLY9twtW/Jo07b08yF/W/kYms+vXEjoSCfKABuJkeNKyWmKfOOhFCg9w0t uVg0jZZS1r87J/G8KgAI26oulRC8tOgIh7ucgPZb8bD3RUUoRJzPu/U2OdOL4bzSFG2A3T WDATmRtM98oCibfAWRFIvJ6nrLp/BFdr0RVOWBb5XkHDU1w9KuOj995ULQe6pA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1755002203; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=WlmRvrNnIA0DY9Ntos0dDpQIQnK9wM46sZykNLHEz3o=; b=Hx0kiI5Oq2HBMXIGnZ7w9HUDjHEenY9mKI6YmvMxbDx5hp7I4QadCkH9mx4T0stlzEMf1j j1bVcVM3DyW356jsrKg9/soBZ95ZqIJJVsVjOx+A4X6xsGJz9hOzq1i8GEtxc8MNo5A2dz rm4e1SSb1b9HYfiljvKA1ezJmHZP0X7jAFxvbh+/Z1ieqIzmf1j9wbA/1zMoGGgdnQGuWi nr6kLrIaV01Fp3na1/8j1yaODxWjLQF/v+JEPTgEC1SOdxz3EWqZpjt1ipO/UgnFCbLahG NDp5blJjG4dc0pGVX7FptZ0vT4tKW8NzhQMhhen7Ul8jnsxF5Q3BoVaD+gkQzw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1755002203; a=rsa-sha256; cv=none; b=FdyLvjior6of2dU6+A95TAhe95JCbdfY2q8RuK3KKmBZZ/yWbK27Fh3XrHK+4E6A8jI/5v EBj096YdsJKpSTvEnWRNO8IO/YRhgZZ2o9N72j8Ny2Is4QQlA0agffmNBCSPKHoe+QnwnT F8uyZyre5MV5EGo/MWQ0xrCsClUlWob9YjWvTRz9ljp13clApl8BTGEPKFYU1wUdCv9GK3 2kL7EnNBkbeWHMR5UmKyH9iyZ4QRxWHGBCCASw4N9wWQ+rHpTKqoVHZpGky1nLgbLpSLx4 A64U87hzIPw4Fq3uWaqZEXjkibMWcS+9hPY8xJc6aS2yhj3bJfc6MnFjMCJNuw== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4c1WGM2VXYzfG1 for ; Tue, 12 Aug 2025 12:36:43 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 57CCahYx084833 for ; Tue, 12 Aug 2025 12:36:43 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 57CCahwq084832 for bugs@FreeBSD.org; Tue, 12 Aug 2025 12:36:43 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 288751] chroot -n fails with "setgroups: Operation not permitted" when security.bsd.unprivileged_chroot=1 Date: Tue, 12 Aug 2025 12:36:43 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: bin X-Bugzilla-Version: 15.0-CURRENT X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: kevans@freebsd.org X-Bugzilla-Status: Closed X-Bugzilla-Resolution: FIXED X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: kevans@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_status resolution assigned_to Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Bug reports List-Archive: https://lists.freebsd.org/archives/freebsd-bugs List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-bugs@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D288751 Kyle Evans changed: What |Removed |Added ---------------------------------------------------------------------------- Status|New |Closed Resolution|--- |FIXED Assignee|bugs@FreeBSD.org |kevans@freebsd.org --- Comment #3 from Kyle Evans --- (In reply to Darrin Smith from comment #0) Sorry about that! Thanks for the diagnosis- I fixed it slightly differently= to account for future changes I'd like to consider. Notably, we have another PR buried somewhere that points out that it'd probably be nice if -u used that user's primary and supplementary groups by default, unless overridden by -g= /-G. That seems like a sensible change and would give us one other spot we might set the gidlist. I'll follow up with some tests later this week. This hadn't been MFCed yet= , so it will go together with the original. --=20 You are receiving this mail because: You are the assignee for the bug.=