RSSAmplifier

Cyphar's Blog · Jul 3, 2016

Adventures into ptrace(2) Hell

0
Sign in to vote or save

This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.

As part of my work on rootless containers , I found that many tools try to drop privileges. This makes those tools break inside rootless containers, so I spent a week or two working on a tool that allows users to shim out all of the 'drop privileges' syscalls. Here is documented the pain that I went through while figuring out how ptrace(2) is meant to work.

Read on cyphar.com

Comments

Nothing yet. Say the first thing.

    Sign in to join the conversation.