Set-user/group-ID bits and executable file capabilities are not supported
Open
area: compatibility
exported
priority: p4
type: cleanup
type: enhancement
- Dominant language
- Go
- Stars
- 19.3k
- Forks
- 2k
- Avg merge
- 3d 5h
- Merged PRs (30d)
- 264
Description
Set-user/group-ID bits and executable file capabilities are currently ignored by the sentry. Effectively, it's as if all processes had PR_SET_NO_NEW_PRIVS set.
Contributor guide
Assessment
This issue has not been assessed yet.