GitHub/quartz
1
0
Fork 2
mirror of https://github.com/jackyzha0/quartz.git synced 2025-12-26 06:14:06 -06:00
Code Issues Actions Packages Projects Releases Wiki Activity
9206c6aba5
quartz/content/Containerized applications can do syscalls directly to the Linux Kernel.md
Mischa van den Burg 7524d53fe9 Automated commit at Sat Mar 30 08:10:09 CET 2024
2024-03-30 08:10:09 +01:00

375 B
Raw Blame History

Every pod (and therefore container) can do direct syscalls to the kernel of the node.

If there are security bugs in the kernel, these can be exploited by the containers directly.

Links:

CKS

from:: CKS Video Course

contributes to:: Container Isolation related research:: What Have Namespaces Done for You Lately?

security

202403241148