crtxcr/exile.h
1
0
Förgrening 0
Kod Ärenden 14 Pull-förfrågningar 1 Släpp Wiki Aktiviteter

exile_init_policy(): Don't unshare network namespaces by default

Bläddra i källkod 
This no longer works on some distros (e. g. Ubuntu 24.04) which
move (back) to restrict unprivileged user namespaces, and is
not required when Landlock is available, which is more and more
a given, thankfully.
This commit is contained in:
Albert S. 2024-05-26 19:28:00 +02:00
förälder 4059c1a093
incheckning 3732524bfa
1 ändrade filer med 2 tillägg och 2 borttagningar
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
exile.c
Visa fil

@ -621,10 +621,10 @@ struct exile_policy *exile_init_policy()
{
return NULL;
}
result->drop_caps = 1;
result->drop_caps = 0;
result->not_dumpable = 1;
result->no_new_privs = 1;
result->namespace_options = EXILE_UNSHARE_MOUNT | EXILE_UNSHARE_USER;
result->namespace_options = EXILE_UNSHARE_AUTOMATIC;
result->namespace_uid = 0;
result->namespace_gid = 0;
return result;