undefined | Better HN

0 pointscontingencies12y ago0 comments

I would like to see an example of that...

0 comments

4 comments · 1 top-level

yebyen12y ago· 3 in thread

Those are great exploits, but they don't show how to escape from a container at all.

Actually they do. The first in most cases for affected kernels, the latter in many cases.

If you can execute arbitrary code in kernel you can modify anything in any container.

yebyen12y ago

What you say seems intuitively correct to me, but I have to ask (because I am a hardcore pedant)... source?

j / k navigate · click thread line to collapse