ESR-01-007 WP1: Missing Default IPC Isolation (Info)
flxo opened this issue · comments
During a source code review of the northstar-0.6.0 repository, it was identified that Northstar does not create a distinct IPC namespace for each container. As a consequence, containers can participate in and observe SysV IPC components such as shared memory, semaphores or message queues of other containers and the host itself.
Fixed by #765