Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.kernel > #75586

Bug#1012547: linux: disable user namespaces per default

From Ben Hutchings <ben@decadent.org.uk>
Newsgroups linux.debian.bugs.dist, linux.debian.kernel
Subject Bug#1012547: linux: disable user namespaces per default
Date 2022-06-13 17:10 +0200
Message-ID <ExTRv-4yJz-5@gated-at.bofh.it> (permalink)
References <EwdUm-3xRS-7@gated-at.bofh.it> <EwdUm-3xRS-7@gated-at.bofh.it>
Organization linux.* mail to news gateway

Cross-posted to 2 groups.

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

Control: tag -1 wontfix

On Thu, 2022-06-09 at 01:57 +0200, Philippe Cerfon wrote:
[...]
> It rather seems that this feature is only of special use, namely for
> those people who use user namespaces with containers or similar - by
> far no default on a average server or desktop.
[...]

This is wrong.  On the desktop, browsers and Flatpak rely on user
namespaces for sandboxing (with an alternative being to install more
programs setuid-root).  On servers, use of containers is increasingly
common.  This is not "special use", it's absolutely standard.

We made the decision that the benefits of sandboxing with user
namespaces are likely to outweigh the risks, on most systems.  Nothing
you've said convinces me to alter that assessment.

Ben.

-- 
Ben Hutchings
It's easier to fight for one's principles than to live up to them.

Back to linux.debian.kernel | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

Bug#1012547: linux: disable user namespaces per default Philippe Cerfon <philcerf@gmail.com> - 2022-06-09 02:10 +0200
  Bug#1012547: linux: disable user namespaces per default Ben Hutchings <ben@decadent.org.uk> - 2022-06-13 17:10 +0200
    Bug#1012547: linux: disable user namespaces per default Diederik de Haas <didi.debian@cknow.org> - 2022-06-13 18:00 +0200
      Bug#1012547: linux: disable user namespaces per default Ben Hutchings <ben@decadent.org.uk> - 2022-06-13 18:40 +0200
    Bug#1012547: linux: disable user namespaces per default Philippe Cerfon <philcerf@gmail.com> - 2022-06-16 18:30 +0200
      Bug#1012547: linux: disable user namespaces per default Philippe Cerfon <philcerf@gmail.com> - 2022-07-05 15:30 +0200
        Bug#1012547: linux: disable user namespaces per default Philippe Cerfon <philcerf@gmail.com> - 2022-08-08 16:00 +0200
    Bug#1012547: linux: disable user namespaces per default Philippe Cerfon <philcerf@gmail.com> - 2022-10-27 02:00 +0200
      Re: Bug#1012547: linux: disable user namespaces per default Gregor Riepl <onitake@gmail.com> - 2022-10-27 13:40 +0200
  Processed: Re: Bug#1012547: linux: disable user namespaces per  default "Debian Bug Tracking System" <owner@bugs.debian.org> - 2022-06-13 17:10 +0200

csiph-web