Currenlty, no_new_privs can be 0 and seccomp filtering enabled, causing prctl to fail
Possible solutions:
Silently enable no_new_privs when seccomp filter given (probably not)
Check for this and drop out with an error message. Check other combinations like this.
Same problem with chroot and namespaces options
Currenlty, no_new_privs can be 0 and seccomp filtering enabled, causing prctl to fail
Possible solutions:
1) Silently enable no_new_privs when seccomp filter given (probably not)
2) Check for this and drop out with an error message. Check other combinations like this.
Same problem with chroot and namespaces options
crtxcr
がタイトルを Check for no_new_privs required for seccomp filtering から Check for no_new_privs for seccomp filtering に変更 2020-09-26 13:04:04 +02:00
crtxcr
がタイトルを Check for no_new_privs for seccomp filtering から Check for incompatible/incomplete options に変更 2020-09-26 16:20:15 +02:00
Currenlty, no_new_privs can be 0 and seccomp filtering enabled, causing prctl to fail
Possible solutions:
Same problem with chroot and namespaces options
Check for no_new_privs required for seccomp filteringから Check for no_new_privs for seccomp filtering に変更Check for no_new_privs for seccomp filteringから Check for incompatible/incomplete options に変更