Comment 17 for bug 1916541

Revision history for this message
In , Howard Chu (hyc) wrote :

(In reply to Florian Weimer from comment #2)
> I've started a discussion on libc-alpha:
>
> NSS chroot protection
> https://sourceware.org/pipermail/libc-alpha/2021-February/122714.html

Can you link to more context on what security regressions this change was meant to address? chrooted servers have been running for decades using the NSS databases of the chroot jail, and this change breaks all of them.