maklor78
Results
1
issues of
maklor78
In some sandboxed applications like the example code in libseccomp the PR_SET_DUMPABLE is set to 0 to prevent escape via ptrace However here https://github.com/containers/bubblewrap/blob/1f7e2ad948c051054b683461885a0215f1806240/bubblewrap.c#L852 bubblewrap is set as traceable instead....