Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Runtime should limit privileges #96

Open
10 tasks
xibz opened this issue Feb 7, 2019 · 0 comments
Open
10 tasks

Runtime should limit privileges #96

xibz opened this issue Feb 7, 2019 · 0 comments
Labels
area/cri

Comments

@xibz
Copy link
Contributor

xibz commented Feb 7, 2019

  • runtime should support that ReadOnlyRootfs is false
  • runtime should support Privileged is true
  • runtime should support RunAsUser
  • should return error if RunAsGroup is set without RunAsUser
  • runtime should support RunAsUserName
  • runtime should support SupplementalGroups
  • runtime should support setting Capability
  • runtime should support Privileged is false
  • runtime should support RunAsGroup
  • runtime should support that ReadOnlyRootfs is true
@xibz xibz added this to the CRI milestone Feb 7, 2019
@xibz xibz mentioned this issue Feb 7, 2019
Open
@xibz xibz removed this from the CRI milestone Feb 7, 2019
fangn2 pushed a commit to fangn2/firecracker-containerd that referenced this issue Mar 23, 2023
@xibz
Merge pull request firecracker-microvm#96 from superfly/jailer-improv…
b0a25b1 
…ements

Improves and fixes jailer
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
area/cri
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@samuelkarp @xibz