You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
libzfs (libshare?) tries to write to /dev/zfs and /etc/dfs on load. This is somewhat problematic when the library is loaded in a sandboxed environment.
For example, the GRUB bootloader has utilities which optionally link with libzfs. These utilities are invoked as part of the GRUB build process, which results in libzfs being loaded and triggers the following sandbox errors on Gentoo Linux:
�[31;01m*�[0m --------------------------- ACCESS VIOLATION SUMMARY ---------------------------
�[31;01m*�[0m LOG FILE: "/var/log/sandbox/sandbox-23830.log"
�[31;01m*�[0m
VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line
F: open_wr
S: deny
P: /dev/zfs
A: /dev/zfs
R: /dev/zfs
C: grub-mkimage --help
F: mkstemp64
S: deny
P: /etc/dfs/sharetab.XXXXXX
A: /etc/dfs/sharetab.XXXXXX
R: /etc/dfs/sharetab.XXXXXX
C: grub-mkimage --help
Can the libshare library be modified to not write to these locations when the library is loaded?
I believe the relevant code path starts in the libshare_init function in lib/libshare/libshare.c.
The text was updated successfully, but these errors were encountered:
libzfs (libshare?) tries to write to /dev/zfs and /etc/dfs on load. This is somewhat problematic when the library is loaded in a sandboxed environment.
For example, the GRUB bootloader has utilities which optionally link with libzfs. These utilities are invoked as part of the GRUB build process, which results in libzfs being loaded and triggers the following sandbox errors on Gentoo Linux:
Can the libshare library be modified to not write to these locations when the library is loaded?
I believe the relevant code path starts in the libshare_init function in lib/libshare/libshare.c.
The text was updated successfully, but these errors were encountered: