Главная
Study mode:
on
1
S OPEN SOURCE SUMMIT
2
Outline
3
User Namespaces
4
Limitations of Unprivileged Containers
5
Syscalls - A brief overview
6
Syscalls & Seccomp
7
Intercepting Syscalls
8
Emulating Syscalls
9
Problems
10
Ongoing and Future Work
Description:
Explore the intricacies of syscall supervision in this 35-minute conference talk by Christian Brauner from Canonical. Delve into user namespaces, unprivileged container limitations, and syscall fundamentals. Examine the relationship between syscalls and Seccomp, learn about syscall interception and emulation techniques, and discuss associated challenges. Gain insights into ongoing developments and future prospects in this critical area of Linux system management and security.

Syscall Supervision in User Namespaces and Unprivileged Containers

Linux Foundation
Add to list
0:00 / 0:00