[PATCH] nspawn: apply BindUser/Ephemeral from settings file only if trusted
authorLuca Boccassi <luca.boccassi@gmail.com>
Wed, 11 Mar 2026 12:15:26 +0000 (12:15 +0000)
committerTobias Deiminger <tobias.deiminger@linutronix.de>
Mon, 27 Apr 2026 19:48:55 +0000 (21:48 +0200)
commitb11102694357c3ea776d4db4d79cc8c586857254
tree019fd1cdb726f5056a8820367fa9f05c7acd6c76
parent98776ea6100fac4f57bae44854b78691009e05e3
[PATCH] nspawn: apply BindUser/Ephemeral from settings file only if trusted

Originally reported on yeswehack.com as:
YWH-PGM9780-116

Follow-up for 2f8930449079403b26c9164b8eeac78d5af2c8df
Follow-up for a2f577fca0be79b23f61f033229b64884e7d840a

(cherry picked from commit 61bceb1bff4b1f9c126b18dc971ca3e6d8c71c40)
(cherry picked from commit 718711ed876c870a72149eea279b819cdab14e91)
(cherry picked from commit e4db9c12957d315c0ed22c6ca87a816d0927d6dc)

Origin: upstream, https://github.com/systemd/systemd/commit/773fd3b6e72e6c83cbb1cfc1cb20f3793db8649a

Gbp-Pq: Name CVE-2026-40226-1.patch
src/nspawn/nspawn.c