gaol icon indicating copy to clipboard operation
gaol copied to clipboard

Published 20 hours ago • verified publisher icon servo

/proc/self/setgroups write should be conditional

Open kmcallister opened this issue 10 years ago • 2 comments

On my kernel this file doesn't exist and can't be created.

Linux rustmouth 3.16.0-4-amd64 #1 SMP Debian 3.16.7-ckt2-1 (2014-12-08) x86_64 GNU/Linux

kmcallister avatar Mar 10 '15 01:03 kmcallister

Then isn't your kernel insecure and should be upgraded immediately‽

mstewartgallus avatar Aug 01 '15 17:08 mstewartgallus

No, if I remember correctly, not having it is fine if the kernel does not support userns. See https://security-tracker.debian.org/tracker/CVE-2014-8989 for this specific case.

lucab avatar Apr 06 '16 19:04 lucab