Skip to content

L
lxc
Unverified Commit 1325da7e by Christian Brauner
Options

attach_options: add LXC_ATTACH_NO_NEW_PRIVS

Add a flag for PR_SET_NO_NEW_PRIVS. It is off by default. Signed-off-by: 's avatarChristian Brauner <christian.brauner@canonical.com>
parent 029cdff5
Showing with 2 additions and 0 deletions
src/lxc/attach_options.h
...@@ -49,6 +49,8 @@ enum { ...@@ -49,6 +49,8 @@ enum {
/* the following are off by default */ /* the following are off by default */
LXC_ATTACH_REMOUNT_PROC_SYS = 0x00010000, //!< Remount /proc filesystem LXC_ATTACH_REMOUNT_PROC_SYS = 0x00010000, //!< Remount /proc filesystem
LXC_ATTACH_LSM_NOW = 0x00020000, //!< FIXME: unknown LXC_ATTACH_LSM_NOW = 0x00020000, //!< FIXME: unknown
/* Set PR_SET_NO_NEW_PRIVS to block execve() gainable privileges. */
LXC_ATTACH_NO_NEW_PRIVS = 0x00040000, //!< PR_SET_NO_NEW_PRIVS
/* we have 16 bits for things that are on by default /* we have 16 bits for things that are on by default
* and 16 bits that are off by default, that should * and 16 bits that are off by default, that should
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment