CVE-2017-18188

CVE-2017-18188 affects OpenRC opentmpfiles up to version 0.1.3. When the fs.protected_hardlinks sysctl is disabled, local users can cause a file ownership change by creating a hard link inside a directory that will later be processed by a recursive chown -R. The root cause is the interaction betw...