containers / containers/bubblewrap

Test shows warnings

Open
#247 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
C
Stars
8.7k
Forks
386
Avg merge
3d 17h
Merged PRs (30d)
11

Description

A recent security check showed the following warning regarding bubblewrap.
Is there anything to worry about?

> Checking SUID-root program /usr/bin/bwrap: -rwsr-xr-x 1 root root 46960 Oct 11 09:21 /usr/bin/bwrap
> Checking if anyone except root can change /usr/lib/libcap.so.2
> Checking if anyone except root can change /usr/lib/libc.so.6
> Checking if anyone except root can change /lib64/ld-linux-x86-64.so.2
> Checking if anyone except root can change /
> Checking if anyone except root can change /bindfileXXXXXX
> Checking if anyone except root can change /console
> Checking if anyone except root can change /core
> Checking if anyone except root can change /devpts
> Checking if anyone except root can change /mountinfo
> Checking if anyone except root can change /newroot
> Checking if anyone except root can change /newroot/
> Checking if anyone except root can change /oldroot
> Checking if anyone except root can change /oldroot/
> Checking if anyone except root can change /oldroot/dev/
> Checking if anyone except root can change /proc
> Checking if anyone except root can change /proc/kcore
> Checking if anyone except root can change /proc/self/fd
> [UPC001] WARNING: /usr/bin/bwrap is SUID root. /usr/bin/bwrap contains the string /proc/self/fd. The user MYUSER can write to /proc/self/fd
> [UPC001] WARNING: /usr/bin/bwrap is SUID root. /usr/bin/bwrap contains the string /proc/self/fd. The user MYUSER can write to /proc/self
> Checking if anyone except root can change /proc/self/mountinfo
> [UPC001] WARNING: /usr/bin/bwrap is SUID root. /usr/bin/bwrap contains the string /proc/self/mountinfo. The user MYUSER can write to /proc/self/mountinfo
> [UPC001] WARNING: /usr/bin/bwrap is SUID root. /usr/bin/bwrap contains the string /proc/self/mountinfo. The user MYUSER can write to /proc/self
> Checking if anyone except root can change /proc/self/ns/cgroup
> [UPC001] WARNING: /usr/bin/bwrap is SUID root. /usr/bin/bwrap contains the string /proc/self/ns/cgroup. The user MYUSER can write to /proc/self/ns
> [UPC001] WARNING: /usr/bin/bwrap is SUID root. /usr/bin/bwrap contains the string /proc/self/ns/cgroup. The user MYUSER can write to /proc/self
> Checking if anyone except root can change /proc/self/ns/user
> [UPC001] WARNING: /usr/bin/bwrap is SUID root. /usr/bin/bwrap contains the string /proc/self/ns/user. The user MYUSER can write to /proc/self/ns
> [UPC001] WARNING: /usr/bin/bwrap is SUID root. /usr/bin/bwrap contains the string /proc/self/ns/user. The user MYUSER can write to /proc/self

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.