diff options
author | Chris Down <chris@chrisdown.name> | 2020-04-14 18:15:04 +0100 |
---|---|---|
committer | Chris Down <chris@chrisdown.name> | 2020-04-14 18:37:41 +0100 |
commit | e5d9d06353a683f88c750d60ec85af09fb7c2118 (patch) | |
tree | ccf3aa01edc07ffa89dbd6fb39fb3bd01ded0d99 /src/core/ima-setup.h | |
parent | 3cfb7cc50771ca6ee579217c1194534313f03d8d (diff) | |
download | systemd-proot.tar.gz |
virt: Detect proot virtualisation by ptrace metadataproot
proot provides userspace-powered emulation of chroot and mount --bind,
lending it to be used on environments without unprivileged user
namespaces, or in otherwise restricted environments like Android.
In order to achieve this, proot makes use of the kernel's ptrace()
facility, which we can use in order to detect its presence. Since it
doesn't use any kind of namespacing, including PID namespacing, we don't
need to do any tricks when trying to get the tracer's metadata.
For our purposes, proot is listed as a "container", since we mostly use
this also as the bucket for non-container-but-container-like
technologies like WSL. As such, it seems like a good fit for this
section as well.
Diffstat (limited to 'src/core/ima-setup.h')
0 files changed, 0 insertions, 0 deletions