{"id":104360,"date":"2022-06-12T09:36:50","date_gmt":"2022-06-12T07:36:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-firejail-pozvolyayushhaya-poluchit-root-dostup-v-sisteme"},"modified":"2022-06-12T09:36:50","modified_gmt":"2022-06-12T07:36:50","slug":"uyazvimost-v-firejail-pozvolyayushhaya-poluchit-root-dostup-v-sisteme","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimost-v-firejail-pozvolyayushhaya-poluchit-root-dostup-v-sisteme","title":{"rendered":"A firejail-ban egy hib\u00e1t tal\u00e1ltak, amely lehet\u0151v\u00e9 teszi a root hozz\u00e1f\u00e9r\u00e9st a rendszerben","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A Firejail alkalmaz\u00e1sizol\u00e1l\u00f3 seg\u00e9dprogramban s\u00e9r\u00fcl\u00e9kenys\u00e9g (CVE-2022-31214) tal\u00e1lhat\u00f3, amely lehet\u0151v\u00e9 teszi a helyi felhaszn\u00e1l\u00f3k sz\u00e1m\u00e1ra, hogy root jogosults\u00e1gokat szerezzenek az alap\u00e9rtelmezett rendszeren. Nyilv\u00e1nosan el\u00e9rhet\u0151 egy m\u0171k\u00f6d\u0151 exploit, amelyet az aktu\u00e1lis openSUSE, Debian, Arch, Gentoo \u00e9s Fedora kiad\u00e1sokban teszteltek, ahol a firejail seg\u00e9dprogram telep\u00edtve van. A probl\u00e9ma a firejail 0.9.70-es kiad\u00e1s\u00e1ban ker\u00fclt jav\u00edt\u00e1sra. Mint v\u00e9delmi ker\u00fcl\u0151 megold\u00e1s, a be\u00e1ll\u00edt\u00e1sokban (\\\/etc\\\/firejail\\\/firejail.config) aktiv\u00e1lni lehet a \u201ejoin no\u201d \u00e9s \u201eforce-nonewprivs yes\u201d param\u00e9tereket. <\/p>\n

A Firejail a Linuxban a namespaces mechanizmus\u00e1t, az AppArmor-t \u00e9s a rendszerh\u00edv\u00e1sok sz\u0171r\u00e9s\u00e9t (seccomp-bpf) haszn\u00e1lja az izol\u00e1ci\u00f3hoz, de az izol\u00e1lt ind\u00edt\u00e1shoz megn\u00f6velt jogosults\u00e1gok sz\u00fcks\u00e9gesek, amelyeket a suid root flag \u00e1ltal k\u00f6t\u00f6tt seg\u00e9dprogram vagy a sudo haszn\u00e1lat\u00e1val szerez meg. A s\u00e9r\u00fcl\u00e9kenys\u00e9g a \u201e--join=\u201d opci\u00f3 m\u0171k\u00f6d\u00e9s\u00e9nek logikai hib\u00e1j\u00e1b\u00f3l ered, amely hozz\u00e1rendel\u00e9st tesz lehet\u0151v\u00e9 egy m\u00e1r fut\u00f3 izol\u00e1lt k\u00f6rnyezethez (a sandbox k\u00f6rnyezet login parancs\u00e1nak megfelel\u0151en) a k\u00f6rnyezet folyamatazonos\u00edt\u00f3ja alapj\u00e1n. A privil\u00e9giumok \u00e1tvitele el\u0151tti szakaszban a firejail meghat\u00e1rozza a megadott folyamat privil\u00e9giumait, \u00e9s alkalmazza azokat az \u00faj folyamatra, amely a \u201e--join\u201d opci\u00f3 seg\u00edts\u00e9g\u00e9vel csatlakozik a k\u00f6rnyezethez. <\/p>\n

A csatlakoz\u00e1s el\u0151tt ellen\u0151rizz\u00fck, hogy a megadott folyamat a firejail k\u00f6rnyezet\u00e9ben fut-e. Ez az ellen\u0151rz\u00e9s az \\\/run\\\/firejail\\\/mnt\\\/join f\u00e1jl megl\u00e9t\u00e9t \u00e9rt\u00e9keli. Ahhoz, hogy a s\u00e9r\u00fcl\u00e9kenys\u00e9get kihaszn\u00e1lhassa, a t\u00e1mad\u00f3 hamis, nem izol\u00e1lt firejail k\u00f6rnyezetet szimul\u00e1lhat, haszn\u00e1lva a mount namespace-t, majd csatlakozhat hozz\u00e1 a \u201e--join\u201d opci\u00f3 seg\u00edts\u00e9g\u00e9vel. Ha a be\u00e1ll\u00edt\u00e1sokban nincs aktiv\u00e1lva az \u00faj folyamatokban az extra privil\u00e9giumok megszerz\u00e9s\u00e9nek tilt\u00e1sa (prctl NO_NEW_PRIVS), akkor a firejail csatlakoztatja a felhaszn\u00e1l\u00f3t a hamis k\u00f6rnyezethez, \u00e9s megk\u00eds\u00e9rli alkalmazni a user namespace folyamat azonoss\u00e1g\u00e1nak be\u00e1ll\u00edt\u00e1sait (PID 1). <\/p>\n

Ennek eredm\u00e9nyek\u00e9nt a \"firejail --join\" parancs seg\u00edts\u00e9g\u00e9vel csatlakoztatott folyamat az eredeti felhaszn\u00e1l\u00f3i n\u00e9vt\u00e9r felhaszn\u00e1l\u00f3i azonos\u00edt\u00f3ival ugyanazokkal a privil\u00e9giumokkal fog futni, de egy m\u00e1sik, a t\u00e1mad\u00f3 \u00e1ltal teljes m\u00e9rt\u00e9kben ellen\u0151rz\u00f6tt csatol\u00e1si pontban. A t\u00e1mad\u00f3 ak\u00e1r setuid-root programokat is v\u00e9grehajthat a l\u00e9trehozott csatol\u00e1si pontj\u00e1n, ami lehet\u0151v\u00e9 teszi p\u00e9ld\u00e1ul a \/etc\/sudoers be\u00e1ll\u00edt\u00e1sainak vagy a PAM param\u00e9tereinek m\u00f3dos\u00edt\u00e1s\u00e1t a saj\u00e1t f\u00e1jlhierarchi\u00e1j\u00e1ban, ez\u00e1ltal jogot szerezve a root jogokkal val\u00f3 parancs-v\u00e9grehajt\u00e1sra a sudo vagy su seg\u00e9dprogramokkal.
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 \u0434\u043b\u044f \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Firejail \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-31214), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0438\u043c\u0435\u0435\u0442\u0441\u044f \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442, \u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0439 \u0432 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 openSUSE, Debian, Arch, Gentoo \u0438 Fedora \u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u0442\u0438\u043b\u0438\u0442\u043e\u0439 firejail. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 firejail 0.9.70. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0431\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043c\u043e\u0436\u043d\u043e \u0432\u044b\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0432 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 (\/etc\/firejail\/firejail.config) […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104360","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Sebezhet\u0151s\u00e9g a firejail-ban, amely root-hozz\u00e1f\u00e9r\u00e9st biztos\u00edt a rendszerben | ProHoster","description":"A Firejail alkalmaz\u00e1s elszigetelt futtat\u00e1s\u00e1hoz haszn\u00e1lt seg\u00e9dprogramban egy sebezhet\u0151s\u00e9get (CVE-2022-31214) fedeztek fel, amely lehet\u0151v\u00e9 teszi a helyi felhaszn\u00e1l\u00f3k sz\u00e1m\u00e1ra, hogy root jogokat szerezzenek az alapvet\u0151 rendszeren.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimost-v-firejail-pozvolyayushhaya-poluchit-root-dostup-v-sisteme","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 firejail, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 | ProHoster","og:description":"\u0412 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 \u0434\u043b\u044f \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Firejail \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-31214), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimost-v-firejail-pozvolyayushhaya-poluchit-root-dostup-v-sisteme","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-06-12T07:36:50+00:00","article:modified_time":"2022-06-12T07:36:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104360","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-25 11:46:55","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-06-12 07:37:45","updated":"2026-01-25 11:46:55","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/104360","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=104360"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/104360\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=104360"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=104360"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=104360"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}