rootless execution
Open
enhancement
- Dominant language
- Rust
- Stars
- 11
- Forks
- 4
- PR merge metrics
- No merged PRs in 30d
Description
As far as I know, we only require root privileges for the cgroup part. It would be awesome if these privileges could be dropped somehow in order to avoid an escalation. The traditional UNIX approach would be a call to `setresuid(2)` and `setresgid(2)`, although the Linux capabilities feature may look promising as well.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.