aboutsummaryrefslogtreecommitdiff
path: root/doc/manual/rl-next/fchmodat2-sandbox.md
blob: aaa499ccb175c92b6b4be6a3660f8c0c65d15964 (plain)
1
2
3
4
5
6
7
8
9
10
---
synopsis: Creating setuid/setgid binaries with fchmodat2 is now prohibited by the build sandbox
prs: 10501
credits: ma27
category: Fixes
---

The build sandbox blocks any attempt to create setuid/setgid binaries, but didn't check
for the use of the `fchmodat2` syscall which was introduced in Linux 6.6 and is used by
glibc >=2.39. This is fixed now.