Mojo: Continuous Delivery for Juju

  1. Bug #1412692
  2. Comment #1

Comment 1 for bug 1412692

Revision history for this message
Seth Arnold (seth-arnold) wrote :

Some of the guides have advice like the following:

sudo chmod 755 /var/lib/lxc/mojo-how-to.trusty && sudo chmod 755 /var/lib/lxc

Please note that changing /var/lib/lxc to 755 re-exposes https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1244635 -- which allows untrusted users on the system access to potentially old and insecure setuid and setgid binaries. The advice might still be fine for mojo users, but I'd like to suggest if the "chmod 755 /var/lib/lxc" advice stays around, this bug should be mentioned alongside the advice, so users are aware of what they are doing.

Thanks