Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Security review: set security-opt field to no-new-privileges:true #2220

Closed
1 task
natalieparellano opened this issue Apr 23, 2024 · 0 comments · Fixed by buildpacks/pack-private#29
Closed
1 task

Security review: set security-opt field to no-new-privileges:true #2220

natalieparellano opened this issue Apr 23, 2024 · 0 comments · Fixed by buildpacks/pack-private#29
Assignees
@natalieparellano

Comments

@natalieparellano
Copy link
Member

natalieparellano commented Apr 23, 2024 •
edited
Loading

Description

In the security review, this is MED-1: Docker in-container privilege escalation. The action plan asks us to ensure that

The Docker configuration used to create build containers should have the security-opt field set to no-new-privileges:true

Additional context

  • This feature should be documented somewhere
natalieparellano referenced this issue in buildpacks/pack-private May 2, 2024
@natalieparellano
Run build containers with security-opt field set to no-new-privileges…
283acb8 
…=true

Fixes https://github.com/buildpacks/pack-private/issues/22

Signed-off-by: Natalie Arellano <narellano@vmware.com>
@natalieparellano natalieparellano mentioned this issue May 2, 2024
Merged
@natalieparellano natalieparellano linked a pull request May 2, 2024 that will close this issue
Run build containers with updated settings buildpacks/pack-private#29
Merged
natalieparellano referenced this issue in buildpacks/pack-private May 2, 2024
@natalieparellano
Run build containers with security-opt field set to no-new-privileges…
807dc47 
…=true

Fixes https://github.com/buildpacks/pack-private/issues/22

Signed-off-by: Natalie Arellano <narellano@vmware.com>
@natalieparellano natalieparellano self-assigned this Jul 1, 2024
@natalieparellano natalieparellano transferred this issue from buildpacks/pack-private Jul 17, 2024
@natalieparellano natalieparellano mentioned this issue Jul 17, 2024
Closed
1 task
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@natalieparellano natalieparellano

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Run build containers with updated settings buildpacks/pack-private
1 participant
@natalieparellano