diff options
| author |  smitsohu <smitsohu@gmail.com> | 2018-11-04 19:03:49 +0100 |
|---|---|---|
| committer | smitsohu <smitsohu@gmail.com> | 2018-11-04 19:03:49 +0100 |
| commit | 35d2aec567c0e9c9b5c79678b1dc762916d5492c (patch) | |
| tree | 40335d4a7320d830cc5f1717fb8afd6e95532330 /etc | |
| parent | mount appimages nodev,nosuid (diff) | |
| download | firejail-35d2aec567c0e9c9b5c79678b1dc762916d5492c.tar.gz firejail-35d2aec567c0e9c9b5c79678b1dc762916d5492c.tar.zst firejail-35d2aec567c0e9c9b5c79678b1dc762916d5492c.zip | |
recursive remounts: add fallback for old kernels, some improvements
* vanilla kernels before 3.15 don't expose a mount id in /proc/pid/fdinfo files.
This is still relevant on Ubuntu 14.04 with 3.13 kernel, CentOS 7 doesn't
have this problem. In this case fall back to simple a remount and print
a warning.
* drop euid switching as it doesn't really serve a purpose here (paths are not opened
in reading or writing mode, and we are not doing anything with it) and potentially
causes problems when suid programs are sandboxed
* more rigorous error handling
Diffstat (limited to 'etc')
0 files changed, 0 insertions, 0 deletions