Giuseppe Scrivano
|
498dd1905e
|
config: mask thermal interrupt info paths
On Linux, mask "/proc/interrupts" and
"/sys/devices/system/cpu/*/thermal_throttle" inside containers by
default.
It is the equivalent of https://github.com/moby/moby/pull/49560 for Moby.
Mitigates potential Thermal Side-Channel Vulnerability
Exploit (https://github.com/moby/moby/security/advisories/GHSA-6fw5-f8r9-fgfm).
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
|
2025-03-20 19:22:29 +01:00 |