3 ms·
Linux sometimes has "trouble" (security bugs) distinguishing real root and container root, so I wouldn't suggest it.
by Vecr 2y ago
Linux sometimes has "trouble" (security bugs) distinguishing real root and container root, so I wouldn't suggest it.
- jraph 2y agoCan I read more about this? Wouldn't these security bugs quickly fixed? Containers have been widespread for quite some time now (Docker was first released in 2013, more than a decade ago) and this would seem like a basic bug. I'm willing to believe the kernel was buggy back then, but I would expect it is more robust now.
- Vecr 2y agohttps://duckduckgo.com/?t=ffab&q=Linux+user+namespace+vulnerability&ia=web https://duckduckgo.com/?t=ffab&q=Linux+user+namespace+vulner... There's been several. And I wouldn't be surprised if more are still there, or more get introduced.