This repository was archived by the owner on May 6, 2020. It is now read-only.
This repository was archived by the owner on May 6, 2020. It is now read-only.
We may be able to drop cc-shim privileges to the user that has started the container #18
Description
From @dlespiau on April 11, 2017 16:27
It doesn't seem entirely trivial, but the shim doesn't have to run as root. In theory, it could drop privileges to the identity that has issued the docker run.
Copied from original issue: intel/cc-oci-runtime#813