Skip to content
This repository has been archived by the owner on Dec 11, 2024. It is now read-only.

Désactiver l'ASLR sur Kata sans casser l'isolation. #1

Open
maxime-peim opened this issue Feb 2, 2022 · 0 comments
Open

Désactiver l'ASLR sur Kata sans casser l'isolation. #1

maxime-peim opened this issue Feb 2, 2022 · 0 comments
Labels
question Further information is requested

Comments

@maxime-peim
Copy link
Owner

Il est possible de modifier /proc dans un container en le démarrant en mode privilégié (--privileged). Cependant cela monte également des dossiers du système hôte et casse l'isolation.

Des solutions sont proposées kata-containers/runtime#1568 docker-library/docker#191, mais je ne sais pas si elles conservent le niveau de sécurité voulue.
@maxime-peim maxime-peim added the question Further information is requested label Feb 2, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
question Further information is requested
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@maxime-peim