3 ms·
Due to namespacing, anybody can appear as root to the kernel, at least if unprivileged namespacing is allowed. So you kinda need the separation.
by est31 6y ago
Due to namespacing, anybody can appear as root to the kernel, at least if unprivileged namespacing is allowed. So you kinda need the separation.
- londons_explore 6y agoIs this true? While you can appear root to other userspace apps, I don't think any amount of namespacing will let you get capabilities to load kernel drivers...