2 ms·
I got a question: in what scenarios is it vulnerable to use containers as a sandbox?
by liqilin1567 1y ago
I got a question: in what scenarios is it vulnerable to use containers as a sandbox?
- wmf 1y agoAssuming your containers are secure to begin with (which can be tricky to set up), when a new container escape kernel bug is inevitably released you're in a race to patch it before someone exploits your system.
- liqilin1567 11mo agoExactly. Since containers share the same kernel with the host, if there is a kernel bug that can be exploited from within a container, it makes the whole host vulnerable.