3 ms·

Am I understanding correctly that this affects any kernel where custom BPF rules can be applied? Can this be done from within a linux container?

• tptacek 6y ago
  Depending on how the container runtime is configured, yes.
• swiley 6y ago
  Things like containers, chroots, and UML only provide isolation to things that play nicely. Often all three are pretty easy to escape if you want to.