News for hackers. Stuff that matters.

A comment on Reversing the Petya ransomware with constraint solvers. Parent comment

Re:Reversing the Petya ransomware with constraint solvers by comex on Sunday April 24, 2016 @03:43AM (#11558913)
> Some operating systems attempt to provide more secure chroot jails, but linux chroot() does not provide this.

Note that this includes Linux itself with CLONE_NEWNS + pivot_root (which is what Docker does).

[ Parent | on HN ]
Re:Reversing the Petya ransomware with constraint solvers by geofft on Sunday April 24, 2016 @08:20AM (#11559442)
Oh! I didn't know Docker used pivot_root, and I was always curious why that call and chroot() both existed. This makes some sense.
[ Parent | on HN ]