Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Security review: run build containers with userns=host #2218

Closed
1 task
natalieparellano opened this issue Apr 23, 2024 · 0 comments · Fixed by buildpacks/pack-private#29
Closed
1 task

Security review: run build containers with userns=host #2218

natalieparellano opened this issue Apr 23, 2024 · 0 comments · Fixed by buildpacks/pack-private#29
Assignees
@natalieparellano

Comments

@natalieparellano
Copy link
Member

natalieparellano commented Apr 23, 2024 •
edited
Loading

Description

In the security review, this is INFO-1: Specification violation using Docker and user namespaces Build process. The action plan asks us to

Run Docker containers used to build an application with the flag --userns=host to preserve the security properties of the CNB specification

Describe alternatives you've considered

Additional context

  • This feature should be documented somewhere
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@natalieparellano natalieparellano

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Run build containers with updated settings buildpacks/pack-private
1 participant
@natalieparellano