a61b85cf8f
On Fedora 42 onwards, useradd(8) stopped automatically assigning
subordinate group and user ID ranges [1,2] to address a security concern
marked as CVE-2024-56433 [3]. This breaks rootless Podman and Skopeo,
and therefore Toolbx [4].
Restore the subordinate group and user ID ranges until a different
solution emerges.
[1] Fedora shadow-utils commit e1cfa31731cd68aa
https://src.fedoraproject.org/rpms/shadow-utils/c/e1cfa31731cd68aa
https://bugzilla.redhat.com/show_bug.cgi?id=2334168
[2] Fedora shadow-utils commit 4929903292e027ca
https://src.fedoraproject.org/rpms/shadow-utils/c/4929903292e027ca
https://bugzilla.redhat.com/show_bug.cgi?id=2334169
[3] https://github.com/shadow-maint/shadow/issues/1157
[4] https://bugzilla.redhat.com/show_bug.cgi?id=2382662
https://github.com/containers/toolbox/pull/1688
|
||
|---|---|---|
| .. | ||
| build.yaml | ||
| dependencies-centos-9-stream.yaml | ||
| dependencies-fedora-restricted.yaml | ||
| dependencies-fedora.yaml | ||
| setup-env-migration-path-for-coreos-toolbox.yaml | ||
| setup-env-restricted.yaml | ||
| setup-env.yaml | ||
| system-test-commands-options.yaml | ||
| system-test-runtime-environment-arch-fedora.yaml | ||
| system-test-runtime-environment-ubuntu.yaml | ||
| unit-test.yaml | ||