darwin-containers/rund

Can this ever work without disabling SIP?

Closed this issue · 2 comments

Question in title. Security team aren't keen on disabling SIP on-premise, and also it can't be disabled on EC2 mac instances for example.

Please, see #49. It might be possible to only requure disabling part of SIP. But until SIP prevents chroot call, disabling of that part is unavoidable.

Sorry, I totally missed #49!