Linux

48208 readers

1267 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
No misinformation
No NSFW content
No hate speech, bigotry, etc

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago

MODERATORS

nooter692@lemmy.ml

AgreeableLandscape@lemmy.ml

MarcellusDrum@lemmy.ml

cypherpunks@lemmy.ml

cyclohexane@lemmy.ml

d3Xt3r@lemmy.nz

Security issue CVE-2024-2905: World-readable /etc/shadow & /etc/gshadow on Fedora CoreOS, IoT, Atomic Desktops (including Silverblue & Kinoite) (discussion.fedoraproject.org)

submitted 7 months ago by joojmachine@lemmy.ml to c/linux@lemmy.ml

3 comments fedilink hide all child comments

Just a heads-up for the newer Fedora Atomic users out there, and a focus on this part for the longer-term users:

This only impacts new installations and not updated systems thus systems installed from artifacts before those releases are not impacted (Fedora 38 or earlier).

you are viewing a single comment's thread
view the rest of the comments

[–] barbara@lemmy.ml 0 points 7 months ago (2 children)

Isn't selinux enabled by default? Hence, most won't be affected.

On systems with SELinux enabled and in enforcing mode, access to those files is limited to unconfined (usually interactive) users, unconfined systemd services and privileged containers. Confined daemons, users and containers are not able to access them.

[–] dsemy@lemm.ee 4 points 7 months ago* (last edited 7 months ago)

I'm not sure you're right, I can't find information regarding whether users are confined by default on Fedora (Red Hat docs seem to indicate the users are unconfined by default).

Edit: They are not, see https://docs.fedoraproject.org/en-US/quick-docs/selinux-getting-started/#_selinux_examples, specifically:

SELinux can confine Linux users. A number of confined SELinux users exist in SELinux policy. Linux users can be mapped to confined SELinux users to take advantage of the security rules and mechanisms applied to them. For example, mapping a Linux user to the SELinux user_u user, results in a Linux user that is not able to run (unless configured otherwise) set user ID (setuid) applications, such as sudo and su, as well as preventing them from executing files and applications in their home directory. If configured, this prevents users from executing malicious files from their home directories.

[–] Bitrot@lemmy.sdf.org 1 points 7 months ago* (last edited 7 months ago)

ls -Z in any user home will show they are unconfined_u (so will id -Z).