2,257
edits
Changes
Jump to navigation
Jump to search
Line 48:
Line 48: + + +
→Fixes
* Unsupported filesystems silently failed the dump
* Unsupported filesystems silently failed the dump
* External tmpfs (and some other) mounts generated tarballs with their contents
* External tmpfs (and some other) mounts generated tarballs with their contents
* Privately mapped files were picked from wrong mount namespace
* Controlling tty could be restored on wrong tty end
* Tmpfs mount of sub-namespace was restored from wrong image file
=== Security ===
=== Security ===
* Service run as root could allow users to violate ptrace policies
* Service run as root could allow users to violate ptrace policies
* Service run as root could give users access to privileged files and directories
* Service run as root could give users access to privileged files and directories