]> git.ipfire.org Git - thirdparty/systemd.git/commit
machine: do not allow unprivileged users to register other users' processes as machin...
authorLuca Boccassi <bluca@debian.org>
Tue, 16 Sep 2025 16:59:45 +0000 (17:59 +0100)
committerGitHub <noreply@github.com>
Tue, 16 Sep 2025 16:59:45 +0000 (17:59 +0100)
commit4dddcce87403d38edbfb01e7431b980832aac4c7
tree68d90d747c3c55e0cb41c3ddec3610a7c53a54dc
parent77c48bf2f6b023ccc76f940525c425186cd4fcb0
parent8324f9351c5d22fa49fa59d1ec3f71afa9408143
machine: do not allow unprivileged users to register other users' processes as machines (#38911)

Registering a process as a machine means a caller can get machined to
send sigterm to it, and more. If an unpriv user is registering, ensure
the registered process has the same uid.

Follow-up for adaff8eb35d9c471af81fddaa4403bc5843a256f