4 ms·
Why? The article demonstrates exploitation of Docker containers.
by dchest 9y ago
Why? The article demonstrates exploitation of Docker containers.
- oblio 9y agoYeah, but is it limited to Docker containers? Can other container types be attacked in the same way?
- dchest 9y agoSure, you can write an article demonstrating exploitation of Ubuntu containers and call it "Escaping Ubuntu containers".
- chowyuncat 9y agoThe former part was exactly what was done.
- jo909 9y agoIt is a reasonable _assumption_ that other container runtimes on linux might be affected by the same kernel bug. The article does not explore that and the author has no duty to do so just to avoid using a branded technology name. How would you reasonably talk about "Linux containers" without having a very exhaustive list of all existing implementations and testing all of them? If one of them is not affected you are now factually wrong.
- chowyuncat 9y agoThe exploit overwrites kernel memory credentials of a task structure. That structure is the lynchpin of kernel security, including SELinux.