From 0004035d5f716de72de7a6354153081c1146a956 Mon Sep 17 00:00:00 2001 From: Sapan Bhatia Date: Tue, 24 Apr 2012 02:53:14 -0400 Subject: [PATCH] ADded a readme --- README | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/README b/README index e69de29..ce04a54 100644 --- a/README +++ b/README @@ -0,0 +1,7 @@ +This module enables you to protect entries in /proc from untrusted users running in LXC containers. To use it: +- Load the module +- Add /proc entries to the blacklist by running echo "path-to-proc-entry" > /proc/procprotect + +Caveats and todos: +- Only protects opens, not listings +- The ACL mechanism is currently very simple. Permission is denied to containers that have a non-root mount namespace. This will eventually be extended to cgroup-style ACLs. -- 2.43.0