Currenlty, no_new_privs can be 0 and seccomp filtering enabled, causing prctl to fail
Possible solutions:
Silently enable no_new_privs when seccomp filter given (probably not)
Check for this and drop out with an error message. Check other combinations like this.
Same problem with chroot and namespaces options
Currenlty, no_new_privs can be 0 and seccomp filtering enabled, causing prctl to fail
Possible solutions:
1) Silently enable no_new_privs when seccomp filter given (probably not)
2) Check for this and drop out with an error message. Check other combinations like this.
Same problem with chroot and namespaces options
crtxcr
將標題從 Check for no_new_privs required for seccomp filtering 改為 Check for no_new_privs for seccomp filtering2020-09-26 13:04:04 +02:00
crtxcr
將標題從 Check for no_new_privs for seccomp filtering 改為 Check for incompatible/incomplete options2020-09-26 16:20:15 +02:00
Currenlty, no_new_privs can be 0 and seccomp filtering enabled, causing prctl to fail
Possible solutions:
Same problem with chroot and namespaces options
Check for no_new_privs required for seccomp filtering改為 Check for no_new_privs for seccomp filteringCheck for no_new_privs for seccomp filtering改為 Check for incompatible/incomplete options