New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Users can't use sudo #1

Open

wiredhikari opened this issue Jun 16, 2022 · 1 comment

wiredhikari commented Jun 16, 2022

On creating users and assigning them the group wheel and making changes via visudo don't allow users to execute sudo command.

username@rv-qemuu-test ~ $ sudo
sudo: The "no new privileges" flag is set, which prevents sudo from running as root.
sudo: If sudo is running in a container, you may need to adjust the container configuration to disable the flag.

The text was updated successfully, but these errors were encountered:

Owner

bekcpear commented Jun 19, 2022

Hi, it looks like the bubblewrap disables this feature for security. https://github.com/containers/bubblewrap#security

In particular, bubblewrap uses PR_SET_NO_NEW_PRIVS to turn off setuid binaries, which is the traditional way to get out of things like chroots.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment