v3 - Remove the use of unshare + privileged mode and instead

use seccomp to filter for socket syscalls
This commit is contained in:
Victor Frazao 2021-03-30 18:21:40 -04:00
parent 01bc13d115
commit 0778cdb1cc
8 changed files with 76 additions and 9 deletions

View file

@ -70,7 +70,7 @@ jobs:
runner_uid_max: 1500
runner_gid_min: 1100
runner_gid_max: 1500
enable_unshare: false
disable_networking: false
output_max_size: 1024
max_process_count: 64
max_open_files: 2048