Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

refa: remove cap_sys_chroot #235

Closed
wants to merge 1 commit into from
Closed

refa: remove cap_sys_chroot #235

wants to merge 1 commit into from

Conversation

joshiste
Copy link
Member

No description provided.

@joshiste joshiste force-pushed the refa/no-cap-sys-chroot branch 2 times, most recently from 860efaa to 1fc46ee Compare December 19, 2024 12:57
@joshiste joshiste force-pushed the refa/no-cap-sys-chroot branch from 1fc46ee to eefdf98 Compare December 19, 2024 13:49
@joshiste
Copy link
Member Author

We need this to mount files between namespaces.
For the attacks writing to the file system (e.g., stress io / fill disk), we need a separate mount namespace that has the needed stress-ng binary but then needs to mount a path from the mount namespace of the target container to write to it.

@joshiste joshiste closed this Dec 19, 2024
@github-actions github-actions bot locked and limited conversation to collaborators Dec 19, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@joshiste