runc: Add k3s runc binaries to fanotify

lockc-project / lockc

Making containers more secure with eBPF and Linux Security Modules (LSM)

https://lockc-project.github.io/

Apache License 2.0

218 stars 19 forks source link

runc: Add k3s runc binaries to fanotify #205

Closed vadorovsky closed 2 years ago

vadorovsky commented 2 years ago

Looking for runc binary shipped with k3s is a bit trickier, because it comes in the /var/lib/rancher/k3s/data/[ID] directory where ID is random. We need to walk through /var/lib/rancher/k3s.

Signed-off-by: Michal Rostecki vadorovsky@gmail.com