[Bug 121073] [kernel] [patch] run chroot as an unprivileged user

From: <bugzilla-noreply_at_freebsd.org>
Date: Tue, 20 Sep 2022 14:18:44 UTC 
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=121073

Ed Maste <emaste@freebsd.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|Open                        |Closed
         Resolution|---                         |Overcome By Events

--- Comment #13 from Ed Maste <emaste@freebsd.org> ---
Implemented in:

commit a40cf4175c90142442d0c6515f6c83956336699b
Author: Edward Tomasz Napierala <trasz@FreeBSD.org>
Date:   Tue Jul 20 08:56:04 2021 +0000

    Implement unprivileged chroot

    This builds on recently introduced NO_NEW_PRIVS flag to implement
    unprivileged chroot, enabled by `security.bsd.unprivileged_chroot`.
    It allows non-root processes to chroot(2), provided they have the
    NO_NEW_PRIVS flag set.

    The chroot(8) utility gets a new flag, -n, which sets NO_NEW_PRIVS
    before chrooting.

    Reviewed By:    kib
    Sponsored By:   EPSRC
    Relnotes:       yes
    Differential Revision:  https://reviews.freebsd.org/D30130

-- 
You are receiving this mail because:
You are the assignee for the bug.