futurile/guix-play
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

news: Add news entry for local privilege escalation.

Browse Source 
* etc/news.scm: Add entry.
This commit is contained in:
Ludovic Courtès 2021-02-09 10:09:09 +01:00
parent aa8de80625
commit b421b2f66e
No known key found for this signature in database
GPG Key ID: 090B11993D9AEBB5
1 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
etc/news.scm
View File

@ -18,6 +18,26 @@
(channel-news
(version 0)
(entry (commit "aa8de806252e3835d57fab351b02d13db762deac")
(title
(en "Risk of local privilege escalation @i{via} setuid programs"))
(body
(en "On Guix System, setuid programs were, until now, installed as
setuid-root @emph{and} setgid-root (in the @file{/run/setuid-programs}
directory). However, most of these programs are meant to run as setuid-root,
but not setgid-root. Thus, this setting posed a risk of local privilege
escalation.
This bug has been fixed and users are advised to upgrade their system, with a
command along the lines of:
@example
guix system reconfigure /run/current-system/configuration.scm
@end example
Users of Guix on a ``foreign distro'' are unaffected. See
@url{https://issues.guix.gnu.org/46395} for more information.")))
(entry (commit "aedbc5ff32a62f45aeed74c6833399a6cf2c22dc")
(title
(en "Create a manifest with @command{guix package --export-manifest}")