Can’t SUID binaries in chroots be ignored, like the nosuid mount flag? | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		cedws on Nov 28, 2024 \| parent \| context \| favorite \| on: PRoot: User-space implementation of chroot, mount ... Can’t SUID binaries in chroots be ignored, like the nosuid mount flag?

blueflow on Nov 28, 2024 [–]

Linux namespaces can do that, with a UID namespace, you drop the ability to do SUID, and then you can open a mount namespace and bind-mount and chroot as you like.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact