[Bug 121073] [kernel] [patch] run chroot as an unprivileged user

[bz-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=121073

Nathan Whitehorn <nwhitehorn at FreeBSD.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #84994|0                           |1
        is obsolete|                            |
                 CC|                            |nwhitehorn at FreeBSD.org

--- Comment #6 from Nathan Whitehorn <nwhitehorn at FreeBSD.org> ---
Created attachment 143547
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=143547&action=edit
Prevents escape from unprivileged chroot

This fixes the issue of using this feature to escape from a chroot established
with privileges after dropping them by the simple expedient of unconditionally
preventing unprivileged chroot while already in a chroot.

The second issue raised (MAC transitions) I know nothing about and cannot
address.

-- 
You are receiving this mail because:
You are the assignee for the bug.