Re:Russia lifts ban on Telegram
by Angeo34 on Friday June 19, 2020 @01:03AM
(#23571137)
If I run applications as a different user or in a chroot without root access how can there be security issues for any other users even if it's some game running through steam
[ Parent
| on HN ]
Re:Russia lifts ban on Telegram
by cookiengineer on Friday June 19, 2020 @04:45AM
(#23572466)
> chroot
Personally I wouldn't trust chroot alone. There were some privilege escalation bugs available in the past from "forgot to sandbox the cwd" [1] to more sophisticated exploits via "nsswitch in docker" [2].
But, of course, given the amount of bugs I'd say that chroot is as secure as it can get. But always take everything with a grain of salt, chroot developers also make mistakes, like everyone.
The problem with chroot is not chroot itself, but all the libraries linked in the binaries. And if I know any statement to be true, it's that game developers on Steam don't give a damn about correctly linking anything. I mean, they even don't get 64bit right. And we have 64bit architecture mainstream since 2005 or so...