3 ms·
> There are many container escapes each year because the chunk of api that they are required to cover is so large What API? The kernel syscall API? If we assu
by vaylian 2y ago
> There are many container escapes each year because the chunk of api that they are required to cover is so large
What API? The kernel syscall API?
If we assume for a moment, that there are no bugs in the Linux namespace implementation, would containers be as safe as virtual machines?
- eyberg 2y agoNo. As I'm responding to this Qualys just announced three new bypasses as of today: https://seclists.org/oss-sec/2025/q1/253 https://seclists.org/oss-sec/2025/q1/253 .
- vaylian 2y agoSorry, can you elaborate? Your answer is not really clear. Why is it not possible for Linux namespaces to be secure?