272db8af1b
This does not add missing release notes, and it doesn't do anything about the profiles feature we would really like to have so we can have consistent credit. Change-Id: I72a6f7acfcff85f380be17dac76501a6f4693776
10 lines
355 B
Markdown
10 lines
355 B
Markdown
---
|
|
synopsis: Creating setuid/setgid binaries with fchmodat2 is now prohibited by the build sandbox
|
|
prs: 10501
|
|
credits: ma27
|
|
category: Fixes
|
|
---
|
|
|
|
The build sandbox blocks any attempt to create setuid/setgid binaries, but didn't check
|
|
for the use of the `fchmodat2` syscall which was introduced in Linux 6.6 and is used by
|
|
glibc >=2.39. This is fixed now.
|