Christian Brauner

icon indicating a website link https://brauner.io icon indicating an email [email protected]

icon location Berlin icon location @lxc

Results 183 comments of Christian Brauner

Block writes to /proc/self/exe and /proc/self/map_files

But you can't write to /proc/self/exe while there binary is executing. Iirc, the gist/a version of the CVE was that an O_PATH FD was opened and then it waited until...

Block writes to /proc/self/exe and /proc/self/map_files

Short of making the binary disappear it's almost impossible to fix this without quite a few heavy kernel changes. For example, by recording that a binary was opened via O_PATH...

starting any container with umask 007 causes lxc-stop to hang and prevents clean shutdown of host system

On Tue, Feb 20, 2018 at 10:59:45PM +0000, ShellCode wrote: > Up, same problem here on Debian Stretch I have some time planned to debug this the next few days....