Re: AUFS security issue - Copying Linux Capabilities using copy_up

Re: AUFS security issue - Copying Linux Capabilities using copy_up

Alon Zahavi: > I understand but think you may consider taking more security measures in > regards to the problem. For example, one way to overcome this issue is to > check if a copy-up-ed file is a capable file, and if it is, strip the > capabilities from it. Another mitigation is to check at the