[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
bug#21226: FAIL: tests/containers.scm
From: |
Jochem Raat |
Subject: |
bug#21226: FAIL: tests/containers.scm |
Date: |
Tue, 11 Aug 2015 15:29:25 +0200 |
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.8.0 |
On 11-08-15 14:41, Thompson, David wrote:
>
> Fixed in commit bc459b6, which skips the tests if /proc/self/setgroups
> does not exist, rather than allowing a system with a vulnerable kernel
> create containers with a new user namespace.
Thanks for the fast response and fix!
>
> I would like to note that you should update your kernel as soon as
> possible, as the lack of /proc/self/setgroups means that you are
> running a kernel with a known security vulnerability. The fix was
> introduced in Linux 3.19, but backported to many older kernels,
> including 3.13.
Thanks for the advice, I have updated my kernel.