oss-security - Re: Firejail local root exploit

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20170104234221.GA25962@hashbang.sh>
Date: Wed, 4 Jan 2017 23:42:21 +0000
From: KellerFuchs <KellerFuchs@...hbang.sh>
To: oss-security@...ts.openwall.com
Cc: netblue30@...oo.com, team@...hbang.sh
Subject: Re: Firejail local root exploit

On Wed, Jan 04, 2017 at 02:12:48PM +0100, Sebastian Krahmer wrote:
> Hi
> 
> Please find attached PoC for firejail, which seems to be quite
> popular sandboxing tool.
> 
> Sebastian


Hi Sebastian,

Thanks a lot for discovering this issue.

For information:
- this specific issue can be mitigated by setting `x11 no` in `/etc/firejail/firejail.config`, as in
  https://github.com/hashbang/shell-etc/pull/133
- the initial fix commited by netblues (firejail's dev) is racy:
  https://github.com/netblue30/firejail/commit/60d4b478f65c60bcc825bb56f85fd6c4fd48b250#commitcomment-20366636


Best,

  Keller Fuchs

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.