Don't user namespaces have significant security issues themselves? | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

feanaro on Dec 6, 2019 | parent | context | favorite | on: Two malicious Python libraries caught stealing SSH...

Don't user namespaces have significant security issues themselves?

cyphar on Dec 6, 2019 [–]

There have been security bugs involving allowing unprivileged user namespaces, but that doesn't matter at all in this case -- seccomp is used by effectively all container runtimes to block things like CLONE_NEWUSER inside containers.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact