2 ms·
A lot the container breakout CVEs do not affect a system that uses SELinux properly.
by bonzini 5y ago
A lot the container breakout CVEs do not affect a system that uses SELinux properly.
- raesene9 5y agohave you seen an analysis of SELinux against the recent set of breakouts? That'd be interesting to see. Definitely the CRI-O one (which is most likely to affect Red Hat based systems) was able to exploit a default OpenShift cluster in my testing.