Saint Dirty Sock, of the Grubby Sock

Patron of snap packages, system sockets, and anyone who trusts how a visitor introduces himself.

Life

In February 2019 Chris Moberly revealed CVE-2019-7304 in snapd, the service that manages snap packages on Ubuntu and other distributions. The daemon worked out its caller's identity in a naive way, and any user could pass for root and ask it for admin-only operations. The name winks at Dirty COW and the socket: a sock that reeks of privilege.

Prayer

O Saint Dirty Sock, who walks in wearing someone else's shoes, let our daemons check who is really knocking. Amen.

How to celebrate

Celebrated by updating snapd to 2.37.1 or later and putting dirty socks in the laundry basket, not in the socket.

Don't wash your dirty socks in someone else's daemon.