{"push_id":1388153449,"size":1,"distinct_size":1,"ref":"refs/heads/djalal/fix-rootdir-dynamicuser","head":"7d368ef035797e7f6464ee597aea9f6a758e5a8d","before":"465ce452ebf4eb678583252556846f459faa1069","commits":[{"sha":"7d368ef035797e7f6464ee597aea9f6a758e5a8d","author":{"name":"Djalal Harouni","email":"4669396459e8f0b901634ccadfc0bb83cfa49e01@opendz.org"},"message":"core: on DynamicUser= make sure that protecting sensitive paths is enforced\n\nThis adds a variable that is always set to false to make sure that\nprotect paths inside sandbox are always enforced and not ignored. The only\ncase when it is set to true is on DynamicUser=no and RootDirectory=/chroot\nis set. This allows users to use more our sandbox features inside RootDirectory=\n\nThe only exception is ProtectSystem=full|strict and when DynamicUser=yes\nis implied. Currently RootDirectory= is not fully compatible with these\ndue to two reasons:\n\n* /chroot/usr|etc has to be present on ProtectSystem=full\n* /chroot// has to be a mount point on ProtectSystem=strict.","distinct":true,"url":"https://api.github.com/repos/endocode/systemd/commits/7d368ef035797e7f6464ee597aea9f6a758e5a8d"}]}
{"actor":{"display_login":"tixxdz"}}