Check for incompatible/incomplete options #3

Nouveau ticket

crtxcr · 2020-09-26T13:03:57+02:00

crtxcr a commenté

2020-09-26 13:03:57 +02:00

.

Propriétaire

Currenlty, no_new_privs can be 0 and seccomp filtering enabled, causing prctl to fail

Possible solutions:

Silently enable no_new_privs when seccomp filter given (probably not)
Check for this and drop out with an error message. Check other combinations like this.

Same problem with chroot and namespaces options

Currenlty, no_new_privs can be 0 and seccomp filtering enabled, causing prctl to fail Possible solutions: 1) Silently enable no_new_privs when seccomp filter given (probably not) 2) Check for this and drop out with an error message. Check other combinations like this. Same problem with chroot and namespaces options

crtxcr a remplacé le titre ~~Check for no_new_privs required for seccomp filtering~~ par Check for no_new_privs for seccomp filtering 2020-09-26 13:04:04 +02:00.

crtxcr a remplacé le titre ~~Check for no_new_privs for seccomp filtering~~ par Check for incompatible/incomplete options 2020-09-26 16:20:15 +02:00.

crtxcr a référencé ce ticket depuis une révision

2021-05-09 12:57:57 +02:00

.

Begin check_policy_sanity(): Checks whether policy is reasonable

crtxcr a référencé ce ticket depuis une révision

2021-05-09 13:00:02 +02:00

.

Begin check_policy_sanity(): Checks whether policy is reasonable

Connectez-vous pour rejoindre cette conversation.