51
submitted 7 months ago by joojmachine@lemmy.ml to c/linux@lemmy.ml

Just a heads-up for the newer Fedora Atomic users out there, and a focus on this part for the longer-term users:

This only impacts new installations and not updated systems thus systems installed from artifacts before those releases are not impacted (Fedora 38 or earlier).

top 3 comments
sorted by: hot top controversial new old
[-] barbara@lemmy.ml 0 points 7 months ago

Isn't selinux enabled by default? Hence, most won't be affected.

On systems with SELinux enabled and in enforcing mode, access to those files is limited to unconfined (usually interactive) users, unconfined systemd services and privileged containers. Confined daemons, users and containers are not able to access them.

[-] dsemy@lemm.ee 4 points 7 months ago* (last edited 7 months ago)

I'm not sure you're right, I can't find information regarding whether users are confined by default on Fedora (Red Hat docs seem to indicate the users are unconfined by default).

Edit: They are not, see https://docs.fedoraproject.org/en-US/quick-docs/selinux-getting-started/#_selinux_examples, specifically:

SELinux can confine Linux users. A number of confined SELinux users exist in SELinux policy. Linux users can be mapped to confined SELinux users to take advantage of the security rules and mechanisms applied to them. For example, mapping a Linux user to the SELinux user_u user, results in a Linux user that is not able to run (unless configured otherwise) set user ID (setuid) applications, such as sudo and su, as well as preventing them from executing files and applications in their home directory. If configured, this prevents users from executing malicious files from their home directories.

[-] Bitrot@lemmy.sdf.org 1 points 7 months ago* (last edited 7 months ago)

ls -Z in any user home will show they are unconfined_u (so will id -Z).

this post was submitted on 10 Apr 2024
51 points (98.1% liked)

Linux

48335 readers
487 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS