6 ms·
If there is any attack surface within a properly-configured container, that's a kernel bug, right?
by hwc 2mo ago
If there is any attack surface within a properly-configured container, that's a kernel bug, right?
- matheusmoreira 2mo agoProbably. If I remember correctly, containers on Linux are implemented using the kernel's namespaces. The same ones which became famous for the vulnerabilities they surfaced in previously unexercised code.