shaba/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2024-12-23 21:35:11 +03:00
Code

tmpfiles.d: Create /var/lib/containers

Browse Source 
Create /var/lib/containers so that it exists with an appropriate mode. We want
0700 by default so that users on the host aren't able to call suid root
binaries in the container. This becomes a security issue if a user can enter a
container as root, create a suid root binary, and call that from the host.
(This assumes that containers are caged by mandatory access control or are
started as user).
This commit is contained in:
Martin Pitt 2014-11-20 14:37:08 +01:00 committed by Lennart Poettering
parent 1fc5560911
commit 797e7a51cd
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
tmpfiles.d/var.conf
View File

@ -18,4 +18,6 @@ f /var/log/btmp 0600 root utmp -
d /var/cache 0755 - - -
d /var/lib 0755 - - -
d /var/lib/containers 0700 - - -
d /var/spool 0755 - - -