Menu

#20 missing-call-to-chdir-with-chroot

v1.0_(example)
open
nobody
None
5
2014-10-21
2014-10-21
No

Hello!
I to build package and in OBS RPMlint the following warning:

mp3blaster.i586: W: missing-call-to-chdir-with-chroot /usr/bin/mp3blaster
This executable appears to call chroot without using chdir to change the
current directory. This is likely an error and permits an attacker to break
out of the chroot by using fchdir. While that's not always a security issue,
this has to be checked.

Discussion


Log in to post a comment.

MongoDB Logo MongoDB