Date: Fri, 12 Nov 2021 12:15:08 +0000 From: bugzilla-noreply@freebsd.org To: jail@FreeBSD.org Subject: [Bug 259770] ggate: jail(2) failure error: Unable to jail process in directory /var/empty after stable/12 src ca9ab8ea1774 Message-ID: <bug-259770-29815-vvFUz2XXEM@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-259770-29815@https.bugs.freebsd.org/bugzilla/> References: <bug-259770-29815@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D259770 --- Comment #4 from Mateusz Guzik <mjg@FreeBSD.org> --- To make my point clearer, I do support privilege dropping and I think it's a security problem the program does not do it already. Letting such a program manage it's own pidfile after dropping everything violates the security boundary. If anything someone should verify the descriptor to pidfile itself does not remain in such a program. --=20 You are receiving this mail because: You are on the CC list for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-259770-29815-vvFUz2XXEM>