containers / containers/bubblewrap
--seccomp and --unshare-user options?
Open
question
- Dominant language
- C
- Stars
- 8.7k
- Forks
- 386
- Avg merge
- 3d 17h
- Merged PRs (30d)
- 11
Description
1. How do we leverage seccomp_export_bpf to generate rules? Is there a tool available? Does passing the compiled list to `--seccomp` result in rules to be whitelisted or blacklisted?
2. If bwrap creates a new user namespace for the sandbox by default, why does the `--unshare-user` option exist? To allow for custom UID/GID only?
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.