Files
Warren Young 0080368fd6 Clarified the consequences of --network=host
The prior version talked about potential access to DBus, but this is a
bogus warning: default OS setups do not bind DBus to localhost or to an
abstract Unix socket.  It is possible that the original author was
thinking of CVE-2020–15257, which affected containerd's abstract Unix
socket; they fixed it by switching to a named socket, just as DBus
always (?) has done.

Signed-off-by: Warren Young <wyoung@tangentsoft.com>
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-06-10 18:47:55 +02:00
..
2025-01-31 16:19:18 -06:00
2025-01-21 12:47:30 -06:00
2025-01-21 12:47:30 -06:00
2025-01-21 12:47:30 -06:00
2025-04-22 16:50:02 -04:00
2025-01-17 08:30:45 +01:00
2025-01-15 06:51:32 -05:00
2022-09-06 09:37:13 -07:00
2024-04-04 09:28:21 -04:00
2024-04-03 10:18:49 +00:00