Currenlty, no_new_privs can be 0 and seccomp filtering enabled, causing prctl to fail
Possible solutions:
Silently enable no_new_privs when seccomp filter given (probably not)
Check for this and drop out with an error message. Check other combinations like this.
Same problem with chroot and namespaces options
Currenlty, no_new_privs can be 0 and seccomp filtering enabled, causing prctl to fail
Possible solutions:
1) Silently enable no_new_privs when seccomp filter given (probably not)
2) Check for this and drop out with an error message. Check other combinations like this.
Same problem with chroot and namespaces options
crtxcr
于 2020-09-26 13:04:04 +02:00 修改标题 Check for no_new_privs required for seccomp filtering 为 Check for no_new_privs for seccomp filtering
crtxcr
于 2020-09-26 16:20:15 +02:00 修改标题 Check for no_new_privs for seccomp filtering 为 Check for incompatible/incomplete options
Currenlty, no_new_privs can be 0 and seccomp filtering enabled, causing prctl to fail
Possible solutions:
Same problem with chroot and namespaces options
Check for no_new_privs required for seccomp filtering为 Check for no_new_privs for seccomp filteringCheck for no_new_privs for seccomp filtering为 Check for incompatible/incomplete options