diff --git a/README.md b/README.md index 37f8d77..d87918a 100644 --- a/README.md +++ b/README.md @@ -36,9 +36,9 @@ $ hakoniwa run --verbose -- /bin/bash [2022-08-21T09:14:11Z INFO hakoniwa::executor] Mount point: host_path: "/usr/lib", container_path: "/lib64", fstype: "", rw: false [2022-08-21T09:14:11Z INFO hakoniwa::executor] Mount point: host_path: "/usr", container_path: "/usr", fstype: "", rw: false [2022-08-21T09:14:11Z INFO hakoniwa::executor] Mount point: host_path: "/dev/null", container_path: "/dev/null", fstype: "", rw: true -[2022-08-21T09:14:11Z INFO hakoniwa::executor] Mount point: host_path: "/dev/random", container_path: "/dev/random", fstype: "", rw: false -[2022-08-21T09:14:11Z INFO hakoniwa::executor] Mount point: host_path: "/dev/urandom", container_path: "/dev/urandom", fstype: "", rw: false -[2022-08-21T09:14:11Z INFO hakoniwa::executor] Mount point: host_path: "/dev/zero", container_path: "/dev/zero", fstype: "", rw: false +[2022-08-21T09:14:11Z INFO hakoniwa::executor] Mount point: host_path: "/dev/random", container_path: "/dev/random", fstype: "", rw: true +[2022-08-21T09:14:11Z INFO hakoniwa::executor] Mount point: host_path: "/dev/urandom", container_path: "/dev/urandom", fstype: "", rw: true +[2022-08-21T09:14:11Z INFO hakoniwa::executor] Mount point: host_path: "/dev/zero", container_path: "/dev/zero", fstype: "", rw: true [2022-08-21T09:14:11Z INFO hakoniwa::executor] UID map: host_id: 5001, container_id: 5001 [2022-08-21T09:14:11Z INFO hakoniwa::executor] GID map: host_id: 1000, container_id: 1000 [2022-08-21T09:14:11Z INFO hakoniwa::executor] Seccomp: disabled @@ -81,9 +81,9 @@ mounts = [ { source = "/lib64" , target = "/lib64" }, { source = "/usr" , target = "/usr" }, { source = "/dev/null" , target = "/dev/null" , rw = true }, - { source = "/dev/random" , target = "/dev/random" }, - { source = "/dev/urandom", target = "/dev/urandom" }, - { source = "/dev/zero" , target = "/dev/zero" }, + { source = "/dev/random" , target = "/dev/random" , rw = true }, + { source = "/dev/urandom", target = "/dev/urandom" , rw = true }, + { source = "/dev/zero" , target = "/dev/zero" , rw = true }, ] [env] diff --git a/hakoniwa-cli/examples/apps-firefox/policy.toml b/hakoniwa-cli/examples/apps-firefox/policy.toml index adf8f2b..b7ae806 100644 --- a/hakoniwa-cli/examples/apps-firefox/policy.toml +++ b/hakoniwa-cli/examples/apps-firefox/policy.toml @@ -7,7 +7,7 @@ mounts = [ { source = "/lib64" , target = "/lib64" }, { source = "/usr" , target = "/usr" }, { source = "/dev/null" , target = "/dev/null" , rw = true }, - { source = "/dev/random", target = "/dev/random" }, + { source = "/dev/random", target = "/dev/random" , rw = true }, { source = "/dev/snd" , target = "/dev/snd" }, { source = "/etc/fonts" , target = "/etc/fonts" }, { source = "/etc/machine-id" , target = "/etc/machine-id" }, diff --git a/hakoniwa-cli/examples/howto-seccomp-syscalls.md b/hakoniwa-cli/examples/howto-seccomp-syscalls.md index ef5ea77..52b9aeb 100644 --- a/hakoniwa-cli/examples/howto-seccomp-syscalls.md +++ b/hakoniwa-cli/examples/howto-seccomp-syscalls.md @@ -49,7 +49,6 @@ To summarize: ```sh $ sudo ausearch -ts 17:15:56 -m seccomp -i | awk -F " : " '{ print $2 }' | awk -F "[ =]" '{ print $20 }' | sort | uniq - access arch_prctl brk diff --git a/hakoniwa-cli/examples/usage-verbose.md b/hakoniwa-cli/examples/usage-verbose.md index 3098b38..80c9584 100644 --- a/hakoniwa-cli/examples/usage-verbose.md +++ b/hakoniwa-cli/examples/usage-verbose.md @@ -15,9 +15,9 @@ $ hakoniwa run --verbose -- echo "Hako!" [2022-08-21T10:17:39Z INFO hakoniwa::executor] Mount point: host_path: "/usr/lib", container_path: "/lib64", fstype: "", rw: false [2022-08-21T10:17:39Z INFO hakoniwa::executor] Mount point: host_path: "/usr", container_path: "/usr", fstype: "", rw: false [2022-08-21T10:17:39Z INFO hakoniwa::executor] Mount point: host_path: "/dev/null", container_path: "/dev/null", fstype: "", rw: true -[2022-08-21T10:17:39Z INFO hakoniwa::executor] Mount point: host_path: "/dev/random", container_path: "/dev/random", fstype: "", rw: false -[2022-08-21T10:17:39Z INFO hakoniwa::executor] Mount point: host_path: "/dev/urandom", container_path: "/dev/urandom", fstype: "", rw: false -[2022-08-21T10:17:39Z INFO hakoniwa::executor] Mount point: host_path: "/dev/zero", container_path: "/dev/zero", fstype: "", rw: false +[2022-08-21T10:17:39Z INFO hakoniwa::executor] Mount point: host_path: "/dev/random", container_path: "/dev/random", fstype: "", rw: true +[2022-08-21T10:17:39Z INFO hakoniwa::executor] Mount point: host_path: "/dev/urandom", container_path: "/dev/urandom", fstype: "", rw: true +[2022-08-21T10:17:39Z INFO hakoniwa::executor] Mount point: host_path: "/dev/zero", container_path: "/dev/zero", fstype: "", rw: true [2022-08-21T10:17:39Z INFO hakoniwa::executor] UID map: host_id: 5001, container_id: 5001 [2022-08-21T10:17:39Z INFO hakoniwa::executor] GID map: host_id: 1000, container_id: 1000 [2022-08-21T10:17:39Z INFO hakoniwa::executor] Seccomp: disabled