[Bug 259770] ggate: jail(2) failure error: Unable to jail process in directory /var/empty after stable/12 src ca9ab8ea1774

Go to: [ bottom of page ] [ top of archives ] [ this month ]

From: <bugzilla-noreply_at_freebsd.org>
Date: Fri, 12 Nov 2021 12:15:08 UTC

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=259770

--- Comment #4 from Mateusz Guzik <mjg@FreeBSD.org> ---
To make my point clearer, I do support privilege dropping and I think it's a
security problem the program does not do it already. Letting such a program
manage it's own pidfile after dropping everything violates the security
boundary. If anything someone should verify the descriptor to pidfile itself
does not remain in such a program.

-- 
You are receiving this mail because:
You are on the CC list for the bug.