logoalt Hacker News

hwcyesterday at 3:02 PM1 replyview on HN

If there is any attack surface within a properly-configured container, that's a kernel bug, right?


Replies

matheusmoreirayesterday at 3:07 PM

Probably. If I remember correctly, containers on Linux are implemented using the kernel's namespaces. The same ones which became famous for the vulnerabilities they surfaced in previously unexercised code.