mirrors/talos
1
0
Fork 0
mirror of https://github.com/siderolabs/talos.git synced 2025-10-07 13:41:20 +02:00
Code Issues Packages Projects Releases Wiki Activity
3,847 Commits 28 Branches 540 Tags
Commit Graph

2 Commits

Author SHA1 Message Date
Noel Georgi
cc6e37a47f
feat: use process wrapper for dropping capabilities 
Use process wrapper introduced in #6814 to drop capabilities. This change
also means the capabilities are dropped per process level and not for
PID 1 (machined), which allows us to drop capabilities per process.

Signed-off-by: Noel Georgi <git@frezbo.dev>
 2023-02-07 00:49:56 +05:30
Andrey Smirnov
69897dbba4
feat: drop some capabilities to be never available 
This PR makes sure that some capabilities (SYS_BOOT and SYS_MODULES) and
never be gained by any process running on Talos except for `machined`
itself.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
 2021-09-08 14:46:36 +03:00