Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow a user to disable oci-register-machine #22

Merged
merged 1 commit into from Aug 17, 2016

Conversation

Projects
None yet
2 participants
@rhatdan
Copy link
Member

commented Aug 17, 2016

oci-register-machine can be considered an information leak for
certain container workloads. It allows information about the container
to be viewed by non privileged users. Some adinistrators may want to disable
containers reporting this information to systemd-machinectl. We want this
package installed by default, and removing this package is not an option
on atomic host.

This patch adds a /etc/oci-register-machine.conf which contains a json
data to disable the tool.

Allow a user to disable oci-register-machine
oci-register-machine can be considered an information leak for
certain container workloads.  It allows information about the container
to be viewed by non privileged users.  Some adinistrators may want to disable
containers reporting this information to systemd-machinectl.  We want this
package installed by default, and removing this package is not an option
on atomic host.

This patch adds a /etc/oci-register-machine.conf which contains a json
data to disable the tool.
@rhatdan

This comment has been minimized.

Copy link
Member Author

commented Aug 17, 2016

@rhatdan

This comment has been minimized.

Copy link
Member Author

commented Aug 17, 2016

@mrunalp

This comment has been minimized.

Copy link
Member

commented Aug 17, 2016

LGTM

On Aug 17, 2016, at 6:20 AM, Daniel J Walsh notifications@github.com wrote:

@mrunalp @lsm5 PTAL


You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub, or mute the thread.

@rhatdan rhatdan merged commit 40e9650 into projectatomic:master Aug 17, 2016

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.