Skip to content

Instantly share code, notes, and snippets.

@mrunalp

mrunalp/execute_disable.txt

Created May 20, 2022 01:21
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save mrunalp/47aec5092d168ebc1cb6a213e7b316c9 to your computer and use it in GitHub Desktop.
Save mrunalp/47aec5092d168ebc1cb6a213e7b316c9 to your computer and use it in GitHub Desktop.
Download ZIP
OpenShift executable disable
Raw
execute_disable.txt
[mrunalp@fedora ~]$ oc debug node/ci-ln-448x92k-72292-wppv7-worker-a-v29zc
W0519 18:18:56.438639 166726 warnings.go:70] would violate PodSecurity "restricted:latest": host namespaces (hostNetwork=true, hostPID=true), hostPath volumes (volume "host"), privileged (container "container-00" must not set securityContext.privileged=true), allowPrivilegeEscalation != false (container "container-00" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "container-00" must set securityContext.capabilities.drop=["ALL"]), restricted volume types (volume "host" uses restricted volume type "hostPath"), runAsNonRoot != true (pod or container "container-00" must set securityContext.runAsNonRoot=true), runAsUser=0 (container "container-00" must not set runAsUser=0), seccompProfile (pod or container "container-00" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
Starting pod/ci-ln-448x92k-72292-wppv7-worker-a-v29zc-debug ...
To use host binaries, run `chroot /host`
Pod IP: 10.0.128.4
If you don't see a command prompt, try pressing enter.
sh-4.4# chroot /host
sh-4.4# sudo bash
[root@ci-ln-448x92k-72292-wppv7-worker-a-v29zc /]#
[root@ci-ln-448x92k-72292-wppv7-worker-a-v29zc /]# journalctl | grep "Execute Disable"
May 20 00:03:18 localhost kernel: NX (Execute Disable) protection: active
May 20 00:05:37 localhost kernel: NX (Execute Disable) protection: active
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment