undefined | Better HN

0 pointscpach4d ago0 comments

That might make Copy Fail harder to exploit, but I still wouldn’t bet money on CF being impossible to use in that scenario.

0 comments

grimblee4d ago

Since in --userns=auto, root inside the container gets assigned to the first uid of the uid range assigned by podman, copyfail would succeed but you'd get uid 647831 and be able to do nothing with it

j / k navigate · click thread line to collapse

0 comments

grimblee4d ago

Since in --userns=auto, root inside the container gets assigned to the first uid of the uid range assigned by podman, copyfail would succeed but you'd get uid 647831 and be able to do nothing with it

j / k navigate · click thread line to collapse