Game containers are created without --cap-drop, no-new-privileges, a pids limit or a memory limit (ec_agent.py:1791). They're internet-facing and run third-party scripts and plugin DLLs.
Fix
Add --cap-drop, --security-opt no-new-privileges, --pids-limit and --memory to container creation
Test the flags with Plutainer first
Game containers are created without `--cap-drop`, `no-new-privileges`, a pids limit or a memory limit (`ec_agent.py:1791`). They're internet-facing and run third-party scripts and plugin DLLs.
**Fix**
- [ ] Add `--cap-drop`, `--security-opt no-new-privileges`, `--pids-limit` and `--memory` to container creation
- [ ] Test the flags with Plutainer first
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Game containers are created without
--cap-drop,no-new-privileges, a pids limit or a memory limit (ec_agent.py:1791). They're internet-facing and run third-party scripts and plugin DLLs.Fix
--cap-drop,--security-opt no-new-privileges,--pids-limitand--memoryto container creation