containers / containers/bubblewrap
Test shows warnings
- Dominant language
- C
- Stars
- 8.7k
- Forks
- 386
- Avg merge
- 3d 17h
- Merged PRs (30d)
- 11
Description
A recent security check showed the following warning regarding bubblewrap.
Is there anything to worry about?
> Checking SUID-root program /usr/bin/bwrap: -rwsr-xr-x 1 root root 46960 Oct 11 09:21 /usr/bin/bwrap
> Checking if anyone except root can change /usr/lib/libcap.so.2
> Checking if anyone except root can change /usr/lib/libc.so.6
> Checking if anyone except root can change /lib64/ld-linux-x86-64.so.2
> Checking if anyone except root can change /
> Checking if anyone except root can change /bindfileXXXXXX
> Checking if anyone except root can change /console
> Checking if anyone except root can change /core
> Checking if anyone except root can change /devpts
> Checking if anyone except root can change /mountinfo
> Checking if anyone except root can change /newroot
> Checking if anyone except root can change /newroot/
> Checking if anyone except root can change /oldroot
> Checking if anyone except root can change /oldroot/
> Checking if anyone except root can change /oldroot/dev/
> Checking if anyone except root can change /proc
> Checking if anyone except root can change /proc/kcore
> Checking if anyone except root can change /proc/self/fd
> [UPC001] WARNING: /usr/bin/bwrap is SUID root. /usr/bin/bwrap contains the string /proc/self/fd. The user MYUSER can write to /proc/self/fd
> [UPC001] WARNING: /usr/bin/bwrap is SUID root. /usr/bin/bwrap contains the string /proc/self/fd. The user MYUSER can write to /proc/self
> Checking if anyone except root can change /proc/self/mountinfo
> [UPC001] WARNING: /usr/bin/bwrap is SUID root. /usr/bin/bwrap contains the string /proc/self/mountinfo. The user MYUSER can write to /proc/self/mountinfo
> [UPC001] WARNING: /usr/bin/bwrap is SUID root. /usr/bin/bwrap contains the string /proc/self/mountinfo. The user MYUSER can write to /proc/self
> Checking if anyone except root can change /proc/self/ns/cgroup
> [UPC001] WARNING: /usr/bin/bwrap is SUID root. /usr/bin/bwrap contains the string /proc/self/ns/cgroup. The user MYUSER can write to /proc/self/ns
> [UPC001] WARNING: /usr/bin/bwrap is SUID root. /usr/bin/bwrap contains the string /proc/self/ns/cgroup. The user MYUSER can write to /proc/self
> Checking if anyone except root can change /proc/self/ns/user
> [UPC001] WARNING: /usr/bin/bwrap is SUID root. /usr/bin/bwrap contains the string /proc/self/ns/user. The user MYUSER can write to /proc/self/ns
> [UPC001] WARNING: /usr/bin/bwrap is SUID root. /usr/bin/bwrap contains the string /proc/self/ns/user. The user MYUSER can write to /proc/self
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.