logoalt Hacker News

watermelon0yesterday at 7:26 PM1 replyview on HN

I'm quite sure there are many application hosting providers which rely on container runtime such as runC (default runtime of containerd/Docker), and a shared kernel between users.


Replies

staticassertionyesterday at 9:30 PM

In a just world, those companies would be held legally accountable for negligent practices. The Linux kernel upstream has made it clear for decades that security is a dirty word.

LPEs on Linux are obscenely commonplace.