mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-12-07 10:22:12 +01:00
Code Issues Packages Projects Releases Wiki Activity
flatcar-scripts/changelog/bugfixes/2024-08-30-fix-sysext-file-ownership.md
Jeremi Piotrowski 412298cd39 changelog: Add entry for sysext file ownership bugfix 
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-08-30 09:52:50 +02:00

2 lines
457 B
Markdown
Raw Blame History

- Fix ownership of systemd units shipped with built-in docker/containerd sysexts. The files shipped on production images were accidentally owned by 1000:1000 instead of 0:0. This uid/gid is not present on Flatcar images but would be assigned to the first created user. Due to contents of sysexts and /usr being readonly on Flatcar, the invalid permissions can't be used to escalate privileges. ([scripts#2266](https://github.com/flatcar/scripts/pull/2266))
Reference in New Issue View Git Blame Copy Permalink