diff options
| author | Giuseppe Scrivano <gscrivan@redhat.com> | 2019-10-25 21:50:29 +0200 |
|---|---|---|
| committer | Giuseppe Scrivano <gscrivan@redhat.com> | 2019-10-25 21:50:29 +0200 |
| commit | 0d5d6dab57590f9f52666031c1979f4cf136d12e (patch) | |
| tree | 1ea299ce4051562eb8530a5b7b1f6971af20872c /libpod/runtime_img_test.go | |
| parent | a01cb220c8389adaeaa8fb2b4c4fbd65e77c0529 (diff) | |
| download | podman-0d5d6dab57590f9f52666031c1979f4cf136d12e.tar.gz podman-0d5d6dab57590f9f52666031c1979f4cf136d12e.tar.bz2 podman-0d5d6dab57590f9f52666031c1979f4cf136d12e.zip | |
systemd: mask /sys/fs/cgroup/systemd/release_agent
when running in systemd mode on cgroups v1, make sure the
/sys/fs/cgroup/systemd/release_agent is masked otherwise the container
is able to modify it and execute scripts on the host.
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
Diffstat (limited to 'libpod/runtime_img_test.go')
0 files changed, 0 insertions, 0 deletions