search

jupyterhub / systemdspawner

Spawn JupyterHub single-user notebook servers with systemd
BSD 3-Clause "New" or "Revised" License
92 stars 45 forks source link

Disable user sudo by default #91

Closed yuvipanda closed 1 year ago

yuvipanda commented 2 years ago

Protects against vulnerabilities such as https://arstechnica.com/information-technology/2022/01/a-bug-lurking-for-12-years-gives-attackers-root-on-every-major-linux-distro/ or the previous sudo vulnerability.

Equivalent of https://github.com/jupyterhub/kubespawner/pull/545

This should be counted as a braking change.

consideRatio commented 1 year ago

I think this is perfect to include in a 1.0.0 release, I'll ensure the changelog captures this.