samuraictf / gatekeeper

GATEKEEPER: Inline and on-target defense
119 stars 15 forks source link

Gatekeeper should run unprivileged #18

Closed zachriggle closed 9 years ago

zachriggle commented 9 years ago

It's possible to run Gatekeeper as privileged, by making the challenge binary be setuid as the challenge user, and dropping privileges in Gatekeeper via CLONE_NEWUSER.