News for hackers. Stuff that matters.

A comment on PRoot: User-space implementation of chroot, mount –bind, and binfmt_misc. Parent comment

Re:PRoot: User-space implementation of chroot, mount –bind, ... by cedws on Thursday November 28, 2024 @07:03AM (#42264617)
Can’t SUID binaries in chroots be ignored, like the nosuid mount flag?
[ Parent | on HN ]
Re:PRoot: User-space implementation of chroot, mount –bind, ... by blueflow on Thursday November 28, 2024 @11:07AM (#42266285)
Linux namespaces can do that, with a UID namespace, you drop the ability to do SUID, and then you can open a mount namespace and bind-mount and chroot as you like.
[ Parent | on HN ]