cgwalters / coretoolbox

"pet container" tool using podman
Apache License 2.0
24 stars 6 forks source link

wrap yum to disable systemd/dbus access #1

Open cgwalters opened 5 years ago

cgwalters commented 5 years ago

We need to do something like inject a wrapper for yum that disables the /run/dbus access; package scripts shouldn't see the host services. There may be unexpected polkit escalations in the unprivileged case, and in the privileged toolbox case it's much more problematic.