Completed
kernel policy
Class Central Classrooms beta
YouTube playlists curated by Class Central.
Classroom Contents
Making Unprivileged Containers More Usable
Automatically move to the next video in the Classroom when playback concludes
- 1 Intro
- 2 Christian Brauner
- 3 Outline
- 4 What are containers
- 5 Limitations
- 6 syscalls
- 7 syscall conventions
- 8 seccomp
- 9 seccomp explained
- 10 syscall decision
- 11 kernel policy
- 12 intercept system calls
- 13 interception diagram
- 14 container manager
- 15 problems with syscall
- 16 race condition
- 17 demo
- 18 questions
- 19 security aspects
