lablup / lablup/backend.ai-jail

Add watch mode

Open
#2 0 comments 0 reactions 1 assignee Claimed by @adrysn View on GitHub
enhancement
Dominant language
Rust
Stars
8
Forks
2
PR merge metrics
No merged PRs in 30d

Description

The current debug mode (enabled via `-debug` flag) dumps too much information.
We should have a "watch" mode that transparently allows all system calls but logs the system calls blocked by the current designated policy. This will be useful to update our filter sets when we encounter new application that does not work with Sorna jail but works well without it.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.