13 ms·

Any exploit against the kernel gaining code execution is a Solaris Zone escape or Freebsd jail escape. Solaris got hit by the one in 2012 which is the non-can

Any exploit against the kernel gaining code execution is a Solaris Zone escape or Freebsd jail escape. Solaris got hit by the one in 2012 which is the non-canonical RIP which hit a bunch of operating systems. FreeBSD has had numerous kernel exploits which could be used for zone escapes.

feld 11y ago
Really? Which ones? I'm pretty sure local privilege exploits that give you root don't magically jump you into JID 0 (prison0), escaping the jail. You'd just have "root" in the jail. edit: well i guess if your attacker knows you're on FreeBSD they could override to prison0 in the exploit. But it's a good thing we dont have a ton of local priv exploits, eh? edit2: and that was a pretty ignorant statement of mine about root exploits anyway :)