crtxcr/exile.h
1
0
Garpu 0
Kode Masalah 14 Tarik Permintaan 1 Rilis Wiki Kegiatan

exile_init_policy(): Don't unshare network namespaces by default

Telusuri Sumber 
This no longer works on some distros (e. g. Ubuntu 24.04) which
move (back) to restrict unprivileged user namespaces, and is
not required when Landlock is available, which is more and more
a given, thankfully.
This commit is contained in:
Albert S. 2024-05-26 19:28:00 +02:00
orang tua 4059c1a093
melakukan 3732524bfa
1 mengubah file dengan 2 tambahan dan 2 penghapusan
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
exile.c
Melihat File

@ -621,10 +621,10 @@ struct exile_policy *exile_init_policy()
{
return NULL;
}
result->drop_caps = 1;
result->drop_caps = 0;
result->not_dumpable = 1;
result->no_new_privs = 1;
result->namespace_options = EXILE_UNSHARE_MOUNT | EXILE_UNSHARE_USER;
result->namespace_options = EXILE_UNSHARE_AUTOMATIC;
result->namespace_uid = 0;
result->namespace_gid = 0;
return result;