Requiring mseal
Requiring mseal
Posted Jun 12, 2024 22:43 UTC (Wed) by jhe (subscriber, #164815)In reply to: Requiring mseal by fw
Parent article: Memory sealing for the GNU C Library
While researching on how to do things like nss correctly with containers, i came to the realisation that container environments might indeed need a separate libc build. Or at least some method so the kernel can properly namespace nss data. Current implementations are ugly hacks.