Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

PVF worker: switch on seccomp networking restrictions #2221

Merged
merged 10 commits into from
Nov 21, 2023
Merged

PVF worker: switch on seccomp networking restrictions #2221

merged 10 commits into from
Nov 21, 2023

Commits on Nov 8, 2023

  1. PVF worker: switch on seccomp networking restrictions 

    We've merged #2009 which logs seccomp violations for networking, but does not
switch on full seccomp restrictions (voting against blocks on violations).

We should monitor releases and once #2009 has been released, we can switch this
on for the next release.

Closes #2163
    @mrcnski
    mrcnski committed Nov 8, 2023
    Configuration menu
    Copy the full SHA
    1e068ed View commit details
    Browse the repository at this point in the history

Commits on Nov 10, 2023

  1. Add back section in impl guide

    @mrcnski
    mrcnski committed Nov 10, 2023
    Configuration menu
    Copy the full SHA
    dddb8b8 View commit details
    Browse the repository at this point in the history

  2. Add retry case to impl guide

    @mrcnski
    mrcnski committed Nov 10, 2023
    Configuration menu
    Copy the full SHA
    2efc58d View commit details
    Browse the repository at this point in the history

Commits on Nov 19, 2023

  1. Merge branch 'master' into mrcnski/pvf-switch-on-networking-restrictions

    @mrcnski
    mrcnski committed Nov 19, 2023
    Configuration menu
    Copy the full SHA
    3687709 View commit details
    Browse the repository at this point in the history

  2. Update doc

    @mrcnski
    mrcnski committed Nov 19, 2023
    Configuration menu
    Copy the full SHA
    7ffc8c4 View commit details
    Browse the repository at this point in the history

Commits on Nov 20, 2023

  1. Add missing code

    @mrcnski
    mrcnski committed Nov 20, 2023
    Configuration menu
    Copy the full SHA
    5cd5408 View commit details
    Browse the repository at this point in the history

  2. Was checking seccomp logs when the worker died, not job process

    @mrcnski
    mrcnski committed Nov 20, 2023
    Configuration menu
    Copy the full SHA
    8bd4f58 View commit details
    Browse the repository at this point in the history

  3. Silence some unnecessary output 

    If `Command::status` is used as opposed to `Command::output` then stderr is
printed instead of piped.
    @mrcnski
    mrcnski committed Nov 20, 2023
    Configuration menu
    Copy the full SHA
    8caea92 View commit details
    Browse the repository at this point in the history

  4. Minor fixes

    @mrcnski
    mrcnski committed Nov 20, 2023
    Configuration menu
    Copy the full SHA
    3b1de08 View commit details
    Browse the repository at this point in the history

  5. Fix syscall detection running for worker and not job

    @mrcnski
    mrcnski committed Nov 20, 2023
    Configuration menu
    Copy the full SHA
    639557d View commit details
    Browse the repository at this point in the history