search

gramineproject / graphene

Graphene / Graphene-SGX - a library OS for Linux multi-process applications, with Intel SGX support
https://grapheneproject.io
GNU Lesser General Public License v3.0
771 stars 260 forks source link

Disallow running Graphene as root #2654

Open boryspoplawski opened 3 years ago

boryspoplawski commented 3 years ago

Description of the changes

Just don't.

This change is Reviewable

boryspoplawski commented 3 years ago

Jenkins, retest Jenkins-Debug-20.04 please (sendfile09 timed out, known issue)

svenkata9 commented 3 years ago

Because it's insecure and unsupported yet lots of people do that.

@boryspoplawski I know executing as root in general is insecure. But, what is the specific issue w.r.t. Graphene?