diff options
author | 2018-11-04 19:03:49 +0100 | |
---|---|---|
committer | 2018-11-04 19:03:49 +0100 | |
commit | 35d2aec567c0e9c9b5c79678b1dc762916d5492c (patch) | |
tree | 40335d4a7320d830cc5f1717fb8afd6e95532330 /etc/disable-common.inc | |
parent | mount appimages nodev,nosuid (diff) | |
download | firejail-35d2aec567c0e9c9b5c79678b1dc762916d5492c.tar.gz firejail-35d2aec567c0e9c9b5c79678b1dc762916d5492c.tar.zst firejail-35d2aec567c0e9c9b5c79678b1dc762916d5492c.zip |
recursive remounts: add fallback for old kernels, some improvements
* vanilla kernels before 3.15 don't expose a mount id in /proc/pid/fdinfo files.
This is still relevant on Ubuntu 14.04 with 3.13 kernel, CentOS 7 doesn't
have this problem. In this case fall back to simple a remount and print
a warning.
* drop euid switching as it doesn't really serve a purpose here (paths are not opened
in reading or writing mode, and we are not doing anything with it) and potentially
causes problems when suid programs are sandboxed
* more rigorous error handling
Diffstat (limited to 'etc/disable-common.inc')
0 files changed, 0 insertions, 0 deletions