Thanks everyone! I appreciate you time and attention on this. Thanks
again for your hard work on the LXD project in general, it's a great
tool.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1829071
Ti
^ Sorry, just to add clarity:
I am not demonstrating the exploit working from within a devmode snap. I
am demonstrating a devmode snap packaged inside the exploit.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad
Hi Gustavo,
Yes, but remember that this is a low-privilege user exploiting the bug
in order to install a snap in devmode to get root.
This does indeed require an exploit, so that the install hook can
execute the commands as root and add a new user. It's simply an
alternative exploit to using the
Thanks again to everyone for your hard work, timely updates, and overall
providing such a great disclosure experience.
See you next time!
- Chris
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/181336