alt Hacker NewsCan you run this in another sandbox? Not sure why you'd want to... but can you?
Replies
wmf • today at 1:00 AM
It's pretty common to run VMs within containers so an attacker has to escape twice. You can probably disable 99% of system calls.
Can you run this in another sandbox? Not sure why you'd want to... but can you?
It's pretty common to run VMs within containers so an attacker has to escape twice. You can probably disable 99% of system calls.
Nested page tables / nested virtualization made it to consumer CPUs about a decade ago, so yes :)