mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-12-06 18:02:02 +01:00
Code Issues Packages Projects Releases Wiki Activity
flatcar-scripts/changelog/bugfixes/2024-08-30-fix-sysext-file-ownership.md
Jeremi Piotrowski 412298cd39 changelog: Add entry for sysext file ownership bugfix 
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-08-30 09:52:50 +02:00

457 B
Raw Blame History

  • Fix ownership of systemd units shipped with built-in docker/containerd sysexts. The files shipped on production images were accidentally owned by 1000:1000 instead of 0:0. This uid/gid is not present on Flatcar images but would be assigned to the first created user. Due to contents of sysexts and /usr being readonly on Flatcar, the invalid permissions can't be used to escalate privileges. (scripts#2266)