Check for incompatible/incomplete options #3

Nieuw probleem

crtxcr · 2020-09-26T13:03:57+02:00

crtxcr reageerde

2020-09-26 13:03:57 +02:00

Eigenaar

Currenlty, no_new_privs can be 0 and seccomp filtering enabled, causing prctl to fail

Possible solutions:

Silently enable no_new_privs when seccomp filter given (probably not)
Check for this and drop out with an error message. Check other combinations like this.

Same problem with chroot and namespaces options

Currenlty, no_new_privs can be 0 and seccomp filtering enabled, causing prctl to fail Possible solutions: 1) Silently enable no_new_privs when seccomp filter given (probably not) 2) Check for this and drop out with an error message. Check other combinations like this. Same problem with chroot and namespaces options

crtxcr titel aangepast van ~~Check for no_new_privs required for seccomp filtering~~ naar Check for no_new_privs for seccomp filtering

2020-09-26 13:04:04 +02:00

crtxcr titel aangepast van ~~Check for no_new_privs for seccomp filtering~~ naar Check for incompatible/incomplete options

2020-09-26 16:20:15 +02:00

crtxcr verwees naar dit probleem vanuit commit 2021-05-09 12:57:57 +02:00'

Begin check_policy_sanity(): Checks whether policy is reasonable

crtxcr verwees naar dit probleem vanuit commit 2021-05-09 13:00:02 +02:00'

Begin check_policy_sanity(): Checks whether policy is reasonable

Log in om deel te nemen aan deze discussie.