None of the listed methods are novel. Most are elaborate ways of saying "privilege escalation". If an untrusted process can escalate to root, ptrace to unrelat

None of the listed methods are novel. Most are elaborate ways of saying "privilege escalation". If an untrusted process can escalate to root, ptrace to unrelated processes, or access memory outside your process, it was never really contained in the first place. Do also note that none of the listed methods works in what the presentation itself calls a "reasonable chroot". > Why not apparmor/selinux instead It's not either or. Dropping privileges is something you preferably do in more ways than one.