3 ms·
Presumably sshd itself used to lock down its own capabilities after a certain point of execution. Removing the landlock means the daemon doesn’t lock itself do
by akdev1l 3y ago
Presumably sshd itself used to lock down its own capabilities after a certain point of execution.
Removing the landlock means the daemon doesn’t lock itself down and will allow for better payload execution when they get to the exploitation stage.
I don’t think these two things are unrelated. I think they already had payloads in mind and realized this would be a hurdle.
- deleted 3y ago[deleted]
- jwilk 3y agoNo. OpenSSH doesn't use Landlock, and even if it did, this patch wouldn't affect it.
- usr1106 3y agoIt's pretty impossible to lock down sshd. The restrictions are inherited by all ancestors. What would the sysadmin say if they find themselves in a restricted shell?
- account42 3y agoProviding answers to things you have no clue about is worse than providing no answer at all.