3 ms·
Don't user namespaces have significant security issues themselves?
by feanaro 7y ago
Don't user namespaces have significant security issues themselves?
- cyphar 7y agoThere have been security bugs involving allowing unprivileged user namespaces, but that doesn't matter at all in this case -- seccomp is used by effectively all container runtimes to block things like CLONE_NEWUSER inside containers.