You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
the java and exec drivers do not isolate processes into new IPC or PID namespaces. as such, there is the potential for processes to discover information about other process on the system, including:
information about other processes available in /proc, including filesystem and environment vars (PID)
information about SystemV IPC objects and POSIX message queues (IPC)
The text was updated successfully, but these errors were encountered:
cgbaker
changed the title
placeholderexec and java do not isolate into PID/IPC namespaces
Jan 29, 2021
I'm going to lock this issue because it has been closed for 120 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.
the java and exec drivers do not isolate processes into new IPC or PID namespaces. as such, there is the potential for processes to discover information about other process on the system, including:
/proc
, including filesystem and environment vars (PID)The text was updated successfully, but these errors were encountered: