{"action":"created","issue":{"url":"https://api.github.com/repos/iocage/iocage/issues/535","repository_url":"https://api.github.com/repos/iocage/iocage","labels_url":"https://api.github.com/repos/iocage/iocage/issues/535/labels{/name}","comments_url":"https://api.github.com/repos/iocage/iocage/issues/535/comments","events_url":"https://api.github.com/repos/iocage/iocage/issues/535/events","html_url":"https://github.com/iocage/iocage/issues/535","id":318684747,"number":535,"title":"iocage chroot is a security bug","user":{"login":"pjd","id":1332039,"avatar_url":"https://avatars3.githubusercontent.com/u/1332039?v=4","gravatar_id":"","url":"https://api.github.com/users/pjd","html_url":"https://github.com/pjd","followers_url":"https://api.github.com/users/pjd/followers","following_url":"https://api.github.com/users/pjd/following{/other_user}","gists_url":"https://api.github.com/users/pjd/gists{/gist_id}","starred_url":"https://api.github.com/users/pjd/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pjd/subscriptions","organizations_url":"https://api.github.com/users/pjd/orgs","repos_url":"https://api.github.com/users/pjd/repos","events_url":"https://api.github.com/users/pjd/events{/privacy}","received_events_url":"https://api.github.com/users/pjd/received_events","type":"User","site_admin":false},"labels":[{"id":517778784,"url":"https://api.github.com/repos/iocage/iocage/labels/bug","name":"bug","color":"ee0701","default":true}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":7,"created_at":"2018-04-29T02:41:08Z","updated_at":"2018-05-08T19:34:29Z","closed_at":"2018-05-08T19:34:29Z","author_association":"NONE","body":"Version 0.9.10 2017/12/22\r\n\r\nChrooting to a jail is not safe. If the jail is compromised it is easly to escape from jail this way. It is enough for an attacker to replace shell or libc inside the jail to load, eg. a kernel module. Once I chroot to jail the kernel module will be loaded and a backdoor can be easly installed in the main system. One should never execute anything from jail's file systems with the main system privileges.\r\n\r\nThis command could be replaced with doing 'jail /iocage/jails/hostname/root hostname /bin/tcsh'."},"comment":{"url":"https://api.github.com/repos/iocage/iocage/issues/comments/387517007","html_url":"https://github.com/iocage/iocage/issues/535#issuecomment-387517007","issue_url":"https://api.github.com/repos/iocage/iocage/issues/535","id":387517007,"user":{"login":"skarekrow","id":1589047,"avatar_url":"https://avatars2.githubusercontent.com/u/1589047?v=4","gravatar_id":"","url":"https://api.github.com/users/skarekrow","html_url":"https://github.com/skarekrow","followers_url":"https://api.github.com/users/skarekrow/followers","following_url":"https://api.github.com/users/skarekrow/following{/other_user}","gists_url":"https://api.github.com/users/skarekrow/gists{/gist_id}","starred_url":"https://api.github.com/users/skarekrow/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/skarekrow/subscriptions","organizations_url":"https://api.github.com/users/skarekrow/orgs","repos_url":"https://api.github.com/users/skarekrow/repos","events_url":"https://api.github.com/users/skarekrow/events{/privacy}","received_events_url":"https://api.github.com/users/skarekrow/received_events","type":"User","site_admin":false},"created_at":"2018-05-08T19:34:29Z","updated_at":"2018-05-08T19:34:29Z","author_association":"OWNER","body":"Yes it is! Thanks @reelsense for noticing"}}
{"actor":{"display_login":"skarekrow"}}