Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.kernel > #75586
| From | Ben Hutchings <ben@decadent.org.uk> |
|---|---|
| Newsgroups | linux.debian.bugs.dist, linux.debian.kernel |
| Subject | Bug#1012547: linux: disable user namespaces per default |
| Date | 2022-06-13 17:10 +0200 |
| Message-ID | <ExTRv-4yJz-5@gated-at.bofh.it> (permalink) |
| References | <EwdUm-3xRS-7@gated-at.bofh.it> <EwdUm-3xRS-7@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
Cross-posted to 2 groups.
[Multipart message — attachments visible in raw view] - view raw
Control: tag -1 wontfix On Thu, 2022-06-09 at 01:57 +0200, Philippe Cerfon wrote: [...] > It rather seems that this feature is only of special use, namely for > those people who use user namespaces with containers or similar - by > far no default on a average server or desktop. [...] This is wrong. On the desktop, browsers and Flatpak rely on user namespaces for sandboxing (with an alternative being to install more programs setuid-root). On servers, use of containers is increasingly common. This is not "special use", it's absolutely standard. We made the decision that the benefits of sandboxing with user namespaces are likely to outweigh the risks, on most systems. Nothing you've said convinces me to alter that assessment. Ben. -- Ben Hutchings It's easier to fight for one's principles than to live up to them.
Back to linux.debian.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Bug#1012547: linux: disable user namespaces per default Philippe Cerfon <philcerf@gmail.com> - 2022-06-09 02:10 +0200
Bug#1012547: linux: disable user namespaces per default Ben Hutchings <ben@decadent.org.uk> - 2022-06-13 17:10 +0200
Bug#1012547: linux: disable user namespaces per default Diederik de Haas <didi.debian@cknow.org> - 2022-06-13 18:00 +0200
Bug#1012547: linux: disable user namespaces per default Ben Hutchings <ben@decadent.org.uk> - 2022-06-13 18:40 +0200
Bug#1012547: linux: disable user namespaces per default Philippe Cerfon <philcerf@gmail.com> - 2022-06-16 18:30 +0200
Bug#1012547: linux: disable user namespaces per default Philippe Cerfon <philcerf@gmail.com> - 2022-07-05 15:30 +0200
Bug#1012547: linux: disable user namespaces per default Philippe Cerfon <philcerf@gmail.com> - 2022-08-08 16:00 +0200
Bug#1012547: linux: disable user namespaces per default Philippe Cerfon <philcerf@gmail.com> - 2022-10-27 02:00 +0200
Re: Bug#1012547: linux: disable user namespaces per default Gregor Riepl <onitake@gmail.com> - 2022-10-27 13:40 +0200
Processed: Re: Bug#1012547: linux: disable user namespaces per default "Debian Bug Tracking System" <owner@bugs.debian.org> - 2022-06-13 17:10 +0200
csiph-web