Groups > linux.debian.bugs.dist > #1108747

Bug#1012547: linux: disable user namespaces per default

From	Philippe Cerfon <philcerf@gmail.com>
Newsgroups	linux.debian.bugs.dist, linux.debian.kernel
Subject	Bug#1012547: linux: disable user namespaces per default
Date	2022-07-05 15:30 +0200
Message-ID	<EFQMN-9izL-5@gated-at.bofh.it> (permalink)
References	<EwdUm-3xRS-7@gated-at.bofh.it> <ExTRv-4yJz-5@gated-at.bofh.it> <Ez0xz-5dYy-1@gated-at.bofh.it> <EwdUm-3xRS-7@gated-at.bofh.it> <Ez0xz-5dYy-1@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Cross-posted to 2 groups.

Show all headers | View raw

On Thu, Jun 16, 2022 at 6:19 PM Philippe Cerfon <philcerf@gmail.com> wrote:
> Well I guess the 6 or so root security holes, and counting

And here we go already, faster than even I'd have expected:

Say welcome to CVE-2022-32250, the next root security hole which would
apparently have been mitigated if Debian were to ship sane defaults.

Shall we guess how many systems are going to be compromised because of
that?! I guess, none, because attackers surely understand that they
should abuse something that's needed for some containers and flatpaks
:-)

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Bug#1012547: linux: disable user namespaces per default Philippe Cerfon <philcerf@gmail.com> - 2022-06-09 02:10 +0200
  Bug#1012547: linux: disable user namespaces per default Ben Hutchings <ben@decadent.org.uk> - 2022-06-13 17:10 +0200
    Bug#1012547: linux: disable user namespaces per default Diederik de Haas <didi.debian@cknow.org> - 2022-06-13 18:00 +0200
      Bug#1012547: linux: disable user namespaces per default Ben Hutchings <ben@decadent.org.uk> - 2022-06-13 18:40 +0200
    Bug#1012547: linux: disable user namespaces per default Philippe Cerfon <philcerf@gmail.com> - 2022-06-16 18:30 +0200
      Bug#1012547: linux: disable user namespaces per default Philippe Cerfon <philcerf@gmail.com> - 2022-07-05 15:30 +0200

csiph-web