5 ms·
Except the default seccomp policy is not used for Kubernetes containers. I didn't really think about this vector where you CLONE_NEWUSER in a container... defi
by cpuguy83 5y ago
Except the default seccomp policy is not used for Kubernetes containers.
I didn't really think about this vector where you CLONE_NEWUSER in a container... definitely on systems that allow unprivileged users to do this it is a problem.