[Bug 1194470] VUL-0: EMBARGOED: CVE-2022-21944: watchman: chown in watchman@.socket unit allows symlink attack

https://bugzilla.suse.com/show_bug.cgi?id=1194470 https://bugzilla.suse.com/show_bug.cgi?id=1194470#c2 Matthias Gerstner changed: What |Removed |Added ---------------------------------------------------------------------------- Group|SUSE Security Internal, | |novellonly | --- Comment #2 from Matthias Gerstner --- The new approach is to call a ExecStartPre script as the unprivileged user. This script will create the state directory in a safe-ish way. The sticky bit directory is shaky for this purpose but I don't see a simple way around that. -- You are receiving this mail because: You are on the CC list for the bug.