You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Nov 24, 2022. It is now read-only.
vagrant-lxc-wrapper currently expects that TMPDIR=/tmp. E.g., TMPDIR=/run/user/1000 vagrant up will fail, with no specific error message, since whitelist regexps only refer to /tmp, whereas any temporary files created will reside elsewhere.
The text was updated successfully, but these errors were encountered:
I'm not sure of the security implications of adding that kind of flexibility to a whitelist-based sudoers file. This whitelist already seems a bit fragile security-wise, it seems to me like it should be avoided in favor of unprivileged containers.
De-hardcoding /tmp looks like something that will have many side-effects and that will require bug squashing in many places (or widening the whitelist so much that it becomes even more insecure).
If you produce a patch, we can continue the conversation around a specific proposition.
Hey, sorry for the silence here but this project is looking for maintainers 😅
As per #499, I've added the ignored label and will close this issue. Thanks for the interest in the project and LMK if you want to step up and take ownership of this project on that other issue 👋
vagrant-lxc-wrapper
currently expects thatTMPDIR=/tmp
. E.g.,TMPDIR=/run/user/1000 vagrant up
will fail, with no specific error message, since whitelist regexps only refer to/tmp
, whereas any temporary files created will reside elsewhere.The text was updated successfully, but these errors were encountered: