Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://queer.hacktivis.me/objects/13eb927d-942e-41f4-97c1-71c569945b62">Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Wednesday, 27-Nov-2024 00:08:55 JST</a><a href="https://queer.hacktivis.me/users/lanodan" title="lanodan@queer.hacktivis.me"><img src="https://gnusocial.jp/avatar/792-48-20230912093141.webp" width="48" height="48" alt="Haelwenn /элвэн/ :triskell:" style="position: absolute; left: 0; top: 0;">Haelwenn /элвэн/ :triskell:</a><div><a href="https://mstdn.io/@wolf480pl/113549844252943724" rel="in-reply-to">in reply to</a><ul><li><li><a href="https://gnusocial.jp/user/105501" title="quad@akko.quad.moe">Quad</a></li></ul></div></section><article><p><a href="https://mstdn.io/@wolf480pl">@wolf480pl</a> <a href="https://akko.quad.moe/users/quad">@quad</a> Not entirely sure if it's not telling lies to userspace, like if you actually try:</p>$ USER=nobody HOME=/ /bin/unshare -U -p -m -f --mount-proc --keep-caps sh
$ nft list ruleset
Operation not permitted (you must be root)
netlink: Error: cache initialization failed: Operation not permitted
$ id
uid=65534(nobody) gid=65534(nobody) groups=65534(nobody)$ dmesg
dmesg: read kernel buffer failed: Operation not permitted
$ nft list ruleset
Operation not permitted (you must be root)
netlink: Error: cache initialization failed: Operation not permitted
$ zpool import -a
cannot discover pools: permission denied
<p>And for bwrap:</p>USER=root HOME=/root bwrap --unshare-user --uid 0 --gid 0 --bind / / /bin/sh
/bin/sh: No controlling tty: open /dev/tty: Permission denied
/bin/sh: warning: won't have full job control
# cd
/bin/sh: cd: /root: Permission denied
# id
uid=0(root) gid=0(root) groups=65534(nobody),0(root)# nft list ruleset
Operation not permitted (you must be root)
netlink: Error: cache initialization failed: Operation not permitted
# dmesg
dmesg: read kernel buffer failed: Operation not permitted
# zpool import -a
Permission denied the ZFS utilities must be run as root.</article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/4073455#notice-7960948">In conversation</a><time datetime="2024-11-27T00:08:55+09:00" title="Wednesday, 27-Nov-2024 00:08:55 JST">about 3 months ago</time> <span>from <span><a href="https://gnusocial.jp/notice/7960948" rel="external" title="Sent from gnusocial.jp via ActivityPub">gnusocial.jp</a></span></span><a href="https://gnusocial.jp/notice/7960948">permalink</a></footer></blockquote>

Corresponding Notice

Embed this notice
Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Wednesday, 27-Nov-2024 00:08:55 JSTHaelwenn /элвэн/ :triskell:
in reply to
- Wolf480pl
- Quad
@wolf480pl @quad Not entirely sure if it's not telling lies to userspace, like if you actually try:
$ USER=nobody HOME=/ /bin/unshare -U -p -m -f --mount-proc --keep-caps sh $ nft list ruleset Operation not permitted (you must be root) netlink: Error: cache initialization failed: Operation not permitted $ id uid=65534(nobody) gid=65534(nobody) groups=65534(nobody) $ dmesg dmesg: read kernel buffer failed: Operation not permitted $ nft list ruleset Operation not permitted (you must be root) netlink: Error: cache initialization failed: Operation not permitted $ zpool import -a cannot discover pools: permission denied
And for bwrap:
USER=root HOME=/root bwrap --unshare-user --uid 0 --gid 0 --bind / / /bin/sh /bin/sh: No controlling tty: open /dev/tty: Permission denied /bin/sh: warning: won't have full job control # cd /bin/sh: cd: /root: Permission denied # id uid=0(root) gid=0(root) groups=65534(nobody),0(root) # nft list ruleset Operation not permitted (you must be root) netlink: Error: cache initialization failed: Operation not permitted # dmesg dmesg: read kernel buffer failed: Operation not permitted # zpool import -a Permission denied the ZFS utilities must be run as root.
In conversationabout 3 months ago from gnusocial.jppermalink

Public

Embed Notice

HTML Code

Corresponding Notice