Kata Containers

  1. Bug #1878234
  2. Comment #3

Comment 3 for bug 1878234

Revision history for this message
Christophe de Dinechin (i-christophe) wrote :

Patch under way.

Here are the annotations I identified so far with exec capabilities:

hypervisor.path
hypervisor.jailer_path
hypervisor.ctlpath
hypervisor.virtio_fs_daemon

Not confirmed yet, but likely a risk:
proxy.path
shim.path
netmon.path

Additionally, no exec but system file overwrite capabilities:

hypervisor.vhost_user_store_path
hypervisor.file_mem_backend