3 ms·
Those are great exploits, but they don't show how to escape from a container at all.
by yebyen 13y ago
Those are great exploits, but they don't show how to escape from a container at all.
- contingencies 13y agoActually they do. The first in most cases for affected kernels, the latter in many cases.
- justincormack 13y agoIf you can execute arbitrary code in kernel you can modify anything in any container.
- yebyen 13y agoWhat you say seems intuitively correct to me, but I have to ask (because I am a hardcore pedant)... source?