You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Starting with glibc 2.32 the compat nss module for getpwnam calls __nss_files_fopen (which is a GLIBC_PRIVATE symbol provided by glibc) instead of fopen (see 299210c1fa67e2dfb564475986fce11cd33db9ad in glibc). This leads to getpwnam calls accessing /etc/passwd from outside the chroot and as a result programs like adduser do not work correctly anymore under fakechroot.
Even if glibc changes to use fopen in the future, fakechroot will be broken for all glibc versions until then. One way to work around this would be to wrap __nss_files_fopen in fakechroot.
The text was updated successfully, but these errors were encountered:
josch
linked a pull request
Sep 9, 2021
that will
close
this issue
Hi,
Starting with glibc 2.32 the compat nss module for getpwnam calls
__nss_files_fopen(which is a GLIBC_PRIVATE symbol provided by glibc) instead of fopen (see 299210c1fa67e2dfb564475986fce11cd33db9ad in glibc). This leads to getpwnam calls accessing /etc/passwd from outside the chroot and as a result programs like adduser do not work correctly anymore under fakechroot.Relevant bug for the Debian fakechroot package: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=993946
Even if glibc changes to use fopen in the future, fakechroot will be broken for all glibc versions until then. One way to work around this would be to wrap
__nss_files_fopenin fakechroot.The text was updated successfully, but these errors were encountered: