6 Commits

Author	SHA1	Message	Date
Rolf Neugebauer	4c1a45957e	pkg: Add NETWORK to audit and rngd packages ... This fixes a regression introduced in: 5a225b9d ("Makefile: Fix bug where network was not disabled") Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>	2017-07-01 18:11:45 +01:00
Rolf Neugebauer	699a864302	pkg: Update to new Alpine base ... Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>	2017-07-01 18:11:45 +01:00
Dave Tucker	5a225b9dc5	Makefile: Fix bug where network was not disabled ... This commit moves the include statement to the bottom of the file to ensure that all variables are set before conditionals are evaluated. I also changed the ifndef NETWORK to ifdef NETWORK as the former was incorrect. We want `NET_OPTS="--network=none"` in cases where NETWORK is not defined. Fixes: #2134 Signed-off-by: Dave Tucker <dt@docker.com>	2017-06-30 11:55:08 +01:00
Tycho Andersen	740b97cc90	auditd: update image hash ... Riyaz has actually pushed this hash, so let's use it. Signed-off-by: Tycho Andersen <tycho@docker.com>	2017-06-28 16:44:54 -06:00
Tycho Andersen	b95e28f466	auditd: add missing build.sh file ... Whoops :) Signed-off-by: Tycho Andersen <tycho@docker.com>	2017-06-28 16:25:46 -06:00
Tycho Andersen	44cbd38650	add an auditd container ... Two things to note here: we unfortunately can't just exec audit, because something needs to load the rules in beforehand. Second, it also dies if it can't re-nice itself, so we have to give it CAP_SYS_NICE as well as the audit caps. I didn't add this to the default linuxkit.yml because the linuxkit/audit repo doesn't exist yet, but we should probably (?) do that. Additionally, we should provide the kernel parameter audit=1, otherwise according to auditd's man pages, we can't audit some early tasks. Closes #52 Signed-off-by: Tycho Andersen <tycho@docker.com>	2017-06-28 09:15:51 -06:00