默认的 seccomp 配置文件阻止了个性化选项 (...|ADDR_NO_RANDOMIZE)
作者: justinsteven创建于 2021年11月11日更新于 2026年9月25日
标签area/security/seccomp
% personality setarch uname -m -R /bin/bash
$ cat /proc/self/maps | grep cat | sha1sum
25947c3fa9e641aab4bd0e2c35e56d3d80bdb8f1 -
$ cat /proc/self/maps | grep cat | sha1sum
25947c3fa9e641aab4bd0e2c35e56d3d80bdb8f1 -
(ASLR is disabled when cat is run normally)
vs.
% personality setarch uname -m -R /bin/bash
$ sudo cat /proc/self/maps | grep cat | sha1sum
92a1f335686a52a9026ffe26faf3cc98c316e935 -
$ sudo cat /proc/self/maps | grep cat | sha1sum
01155bf3f1cadc25d9709d4654d057f967256512 -
(ASLR is disabled when cat is run with suid/sgid)
内容来源: moby/moby