Check for incompatible/incomplete options #3

创建工单

crtxcr · 2020-09-26T13:03:57+02:00

crtxcr 评论于

2020-09-26 13:03:57 +02:00

管理员

Currenlty, no_new_privs can be 0 and seccomp filtering enabled, causing prctl to fail

Possible solutions:

Silently enable no_new_privs when seccomp filter given (probably not)
Check for this and drop out with an error message. Check other combinations like this.

Same problem with chroot and namespaces options

Currenlty, no_new_privs can be 0 and seccomp filtering enabled, causing prctl to fail Possible solutions: 1) Silently enable no_new_privs when seccomp filter given (probably not) 2) Check for this and drop out with an error message. Check other combinations like this. Same problem with chroot and namespaces options

crtxcr 于 2020-09-26 13:04:04 +02:00 修改标题 ~~Check for no_new_privs required for seccomp filtering~~ 为 Check for no_new_privs for seccomp filtering

crtxcr 于 2020-09-26 16:20:15 +02:00 修改标题 ~~Check for no_new_privs for seccomp filtering~~ 为 Check for incompatible/incomplete options

crtxcr 于

2021-05-09 12:57:57 +02:00

在代码提交中引用了该工单

Begin check_policy_sanity(): Checks whether policy is reasonable

crtxcr 于

2021-05-09 13:00:02 +02:00

在代码提交中引用了该工单

Begin check_policy_sanity(): Checks whether policy is reasonable

登录并参与到对话中。