3 ms·
Yes thats one thing Musl libc removes.
by justincormack 5mo ago
Yes thats one thing Musl libc removes.
- geocar 5mo agoIf the attacker can control newroot/etc/passwd they _still_ get getpwnam to return whatever userid they want. The solution is to not lookup --userspec=username:group inside the chrooted-space, but from outside. Also, hi how's things? :)
- justincormack 5mo agohi! good, how are you doing?
- geocar 5mo agogreat. still enjoying the algarve working on my secret projects in the sun. you able to find a reason to come visit? or am i going to have to come to blighty so we can hang out?