7 ms·
I'm not associated with the site, but using their bash one as an example it appears to just be docker <https://codapi.org/bash/#cat%20%2Fproc%2F1%2Fmounts https
by mdaniel 3y ago
I'm not associated with the site, but using their bash one as an example it appears to just be docker <https://codapi.org/bash/#cat%20%2Fproc%2F1%2Fmounts https://codapi.org/bash/#cat%20%2Fproc%2F1%2Fmounts>
I've always heard "containerization is not a security boundary" but I am not red-team enough to provide specific counter-examples
- rkeene2 3y agoIf you do want a stronger security boundary, you can do that without using cgroups and other kinds of namespaces (aside from chroot) pretty easily using something like `firejail` -- that's what I do for this demo [0] (all the software is in /opt/appfs, if you want to try stuff out -- you can browse it here [1]) [0] https://rkeene.dev/js-repl/?arg=bash https://rkeene.dev/js-repl/?arg=bash [1] https://browser.appfs.net/ https://browser.appfs.net/