3 ms·
> But, of course, they are not root on our end Could this be made possible using something like user namespaces / containers with their own hostnames?
by jraph 2y ago
> But, of course, they are not root on our end
Could this be made possible using something like user namespaces / containers with their own hostnames?
- Vecr 2y agoLinux sometimes has "trouble" (security bugs) distinguishing real root and container root, so I wouldn't suggest it.
- jraph 2y agoCan I read more about this? Wouldn't these security bugs quickly fixed? Containers have been widespread for quite some time now (Docker was first released in 2013, more than a decade ago) and this would seem like a basic bug. I'm willing to believe the kernel was buggy back then, but I would expect it is more robust now.
- Vecr 2y agohttps://duckduckgo.com/?t=ffab&q=Linux+user+namespace+vulnerability&ia=web https://duckduckgo.com/?t=ffab&q=Linux+user+namespace+vulner... There's been several. And I wouldn't be surprised if more are still there, or more get introduced.