-
The auditd integration uses regex patterns with the kv ingest pipeline processor to split key=value substrings out of the logs from auditd. Since the values can be arbitrary quoted data including whit…
-
Hi all,
I am attempting to checkpoint and restore a container with an open UDP socket. Unlike TCP, UDP is a connectionless communication protocol and doesn't maintain a stateful connection. However…
-
### Description
```
/opt/docker-desktop/bin/com.docker.diagnose check
Starting diagnostics
[2024-08-28T15:45:17.182157721Z][com.docker.diagnose.ipc] 908afb46-diagnose -> /.docker/desktop/backend…
-
```
Hi.
Please add apparmor (http://apparmor.wiki.kernel.org/)
status reading support (at least):
# cat /proc/29752/attr/current
/usr/sbin/httpd.prefork//HAT_owner_22753 (enforce)
which means tha…
-
I noticed the options shown in the prompts do not match the ones I provided.
For instance, for access to the home folder, there are no options initially, meaning we give the access to the requested…
-
/kind bug
**What happened**:
Trying out snapshot build 20200928 with #3493. virtio-fs is setup to map a cephFS backed PVC.
Ubuntu 18.04. Host kernel: 5.4.0-47-generic. No SELinux. Apparmor enab…
-
### Describe the bug
When enabling `apparmor`, eg. through the hardened profile, it installs an [apparmor profile](https://github.com/NixOS/nixpkgs/blob/841e26462b694d4e1933901139d23f0267b7010b/nix…
-
Trying to login to a kerberos enabled PostgreSQL server fails with:
![grafik](https://github.com/user-attachments/assets/2168c91e-3ee8-402f-af44-6c9daac803a0)
The ticket file `/home/kanis/krb5cc…
-
Parent issue: https://github.com/freedomofpress/dangerzone/issues/221
If an attacker manages to escape the container, we want to restrict them as much as possible. One way to do so is by using AppA…
-
It looks like AppArmor flags are totally missing from kernel configuration. Debian kernel, on the other hand, is configured as follows:
```
$ grep APPARMOR /boot/config-5.18.0-0.deb11.4-amd64
CONF…