4 ms·
Fedora and RHEL 8+ also don't restrict unprivileged user namespaces. They are required for flatpak and rootless podman, both widely used and promoted technologi
by curt15 2y ago
Fedora and RHEL 8+ also don't restrict unprivileged user namespaces. They are required for flatpak and rootless podman, both widely used and promoted technologies in the Red Hat ecosystem.
- fpoling 2y agoFlatpack does not require user namespaces. bubblewrap, the tool Flatpack uses to secure things, can be installed set-uid and can then setup the sandbox without the user namespaces. Chromium-based browsers also include own setuid tool to setup the sandbox if the user-namespaces are not available. Even podman could have used something like that. But I guess RedHat assumes that the user namespaces are solid these days are do not bother…
- worthless-trash 2y ago> Fedora and RHEL 8+ also don't restrict unprivileged user namespaces. Are you sure ? Its disabled by default boot on my systems.