This commit is contained in:
Robert Swiecki 2017-05-06 22:34:33 +02:00
parent d1b3adfc40
commit b98511f991

View File

@ -1,13 +1,13 @@
- [What is it?](#what-is-it-) - [What is it?](#what-is-it-)
- [What form of isolation does it provide?](#what-type-of-isolation-does-this-tool-provide-) - [What form of isolation does it provide?](#what-type-of-isolation-does-this-tool-provide-)
- [Which use-cases are supported?](#which-use-cases-are-supported-) - [Which use-cases are supported?](#which-use-cases-are-supported)
* [Isolation of network services (inetd-style)](#isolation-of-network-services--inetd-style-) * [Isolation of network services (inetd-style)](#isolation-of-network-services--inetd-style)
* [Isolation, with access to a private, cloned interface (requires euid==0)](#isolation--with-access-to-a-private--cloned-interface--requires-euid--0-) * [Isolation, with access to a private, cloned interface (requires euid==0)](#isolation--with-access-to-a-private--cloned-interface--requires-euid--0)
* [Isolation of local processes](#isolation-of-local-processes) * [Isolation of local processes](#isolation-of-local-processes)
* [Isolation of local processes (and re-running them)](#isolation-of-local-processes--and-re-running-them-) * [Isolation of local processes (and re-running them)](#isolation-of-local-processes--and-re-running-them)
* [Bash in a minimal file-system with uid==0 and access to /dev/urandom](#bash-in-a-minimal-file-system-with-uid--0-and-access-to--dev-urandom) * [Bash in a minimal file-system with uid==0 and access to /dev/urandom](#bash-in-a-minimal-file-system-with-uid--0-and-access-to--dev-urandom)
* [Even more contrained shell (with seccomp-bpf policies)](#even-more-contrained-shell--with-seccomp-bpf-policies-) * [Even more contrained shell (with seccomp-bpf policies)](#even-more-contrained-shell--with-seccomp-bpf-policies)
- [More info?](#more-info-) - [More info?](#more-info)
- [Launching in Docker](#launching-in-docker) - [Launching in Docker](#launching-in-docker)
### WHAT IS IT? ### WHAT IS IT?