For educational reasons I've decided to create my own CA. Here is what I learned.
Lets get some context first.
# Step 1: Set priveleges | |
$ sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -configure -allowAccessFor -allUsers -privs -all | |
Starting... | |
Setting allow all users to YES. | |
Setting all users privileges to 1073742079. | |
Done. | |
# Step 2: Allow VNC clients |
# Set variables in .bashrc file | |
# don't forget to change your path correctly! | |
export GOPATH=$HOME/golang | |
export GOROOT=/usr/local/opt/go/libexec | |
export PATH=$PATH:$GOPATH/bin | |
export PATH=$PATH:$GOROOT/bin |
// Copyright 2016 Prometheus Team | |
// Licensed under the Apache License, Version 2.0 (the "License"); | |
// you may not use this file except in compliance with the License. | |
// You may obtain a copy of the License at | |
// | |
// http://www.apache.org/licenses/LICENSE-2.0 | |
// | |
// Unless required by applicable law or agreed to in writing, software | |
// distributed under the License is distributed on an "AS IS" BASIS, | |
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
#!/bin/sh | |
# this script allow you run a container attached to node with root privilege | |
# see https://securek8s.dev/exercise/65-privileged/ | |
# usage: | |
# kubectl get nodes | |
# ./k8s_attach_node.sh <node name> | |
node=${1} | |
if [ -n "${node}" ]; then |
#!/usr/bin/env python3 | |
from struct import unpack | |
from bcc import BPF | |
from socket import if_indextoname | |
C_BPF_KPROBE = """ | |
#include <net/sock.h> |
This document has been moved!