Ubuntu
lxd package

  1. Bug #1584230
  2. Comment #2

Comment 2 for bug 1584230

Revision history for this message
Seth Arnold (seth-arnold) wrote :

If you've got a distribution in a container with a vulnerable setuid-root executable it could be abused by an unprivileged user on the host to get real root on the system. So the filesystem storage is restricted to prevent untrusted users access. (Or, it _should_ be, we did a whole CVE dance for this once, right?)

The zfs iamge cannot be used for the same purpose so it does not need stricter permissions for this reason.

Thanks