Skip to content

Landlock sandboxing is too lax on logger file and too strict on report file #1101

@jcrussell

Description

@jcrussell

Getting a permission denied error when using something like:

unblob -e /tmp/foo --report /tmp/bar/report.json /path/to/file

But it works when I do something like:

unblob -e /tmp/foo --report /tmp/foo/report.json /path/to/file

This:

https://github.com/onekey-sec/unblob/blob/main/python/unblob/sandbox.py#L62

Should be AccessFS.make_dir?

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions