2 ms·
What kind of things are you even doing that the agent would try to perform a kernel exploit on you? I thought sandboxing is just to protect from the agent accid
by vqtska 3mo ago
What kind of things are you even doing that the agent would try to perform a kernel exploit on you? I thought sandboxing is just to protect from the agent accidentally clearing your home directory.
Side note, just 6 days ago a Linux VM escape exploit was disclosed.
- matheusmoreira 3mo agoI'm not worried about the agent at all. The VM is there to prevent it from clobbering files on my real system. I'm worried about supply chain attacks on npm, pip, cargo and everything else. Don't want to get compromised if I install some stupid package. My virtdev project has essentially split my computer into two systems: my "real" trusted system with software coming directly from my Linux distribition's repositories, and the VMs for everything else. > just 6 days ago a Linux VM escape exploit was disclosed Well, shit. Details?
- rvz 3mo agoCVE-2026-53359 - https://github.com/V4bel/Januscape/blob/main/assets/write-up.md https://github.com/V4bel/Januscape/blob/main/assets/write-up... CVE-2026-43499 - https://nebusec.ai/research/ionstack-part-2/ https://nebusec.ai/research/ionstack-part-2/
- matheusmoreira 3mo agoPatched in Linux 7.1.3, which happens to be the exact kernel version I'm running. Update your kernels, folks.
- SoftTalker 3mo ago> npm, pip, cargo and everything else All that stuff should also go into the agent user's home directory.