Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Change EGI container from privileged flag to device flag #56

Closed
Arizbethrojas opened this issue Apr 24, 2023 · 1 comment
Closed

Change EGI container from privileged flag to device flag #56

Arizbethrojas opened this issue Apr 24, 2023 · 1 comment

Comments

@Arizbethrojas
Copy link

Is your feature request related to a problem? Please describe.
Right now, the EGI container, which is the standard interface that works on multiple service providers, runs using the privileged flag on docker. This effectively means that the container has all the capabilities of the host machine, suggesting that a permissions leak is possible.

Describe the solution you'd like
To fix this, we should use a device flag, which does not enable access to the same information that a privileged flag might. At the same time, further testing will be necessary to avoid SkyScan performance impacts.

@rashley-iqt
Copy link
Member

No longer relevant as of 47f9fd5

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants