News for hackers. Stuff that matters.

A comment on Kata Containers – The speed of containers, the security of VMs. Parent comment

Re:Kata Containers – The speed of containers, the security o... by benmmurphy on Thursday December 07, 2017 @09:42AM (#15870312)
yeah there are probably not many 'jail' exploits specifically targeted for getting out of jail/exploiting jail primitives. but people just use normal kernel exploits to get out of jail/zones. i would say jails/zones are about as secure as linux containers. ie: about as secure as the linux kernel is.
[ Parent | on HN ]
Re:Kata Containers – The speed of containers, the security o... by X86BSD on Thursday December 07, 2017 @10:55AM (#15871116)
And you would be wrong.
[ Parent | on HN ]
Re:Kata Containers – The speed of containers, the security o... by helper on Thursday December 07, 2017 @03:37PM (#15873894)
The person you are replying to has discovered multiple exploitable bugs in Illumos via DTrace from inside zones:

Here are the first two that pop up if you google his name. http://www.zerodayinitiative.com/advisories/ZDI-16-168/ http://www.zerodayinitiative.com/advisories/ZDI-16-274/

He gave a talk at DTrace conf 2016 about all the security vulnerabilities he personally found in DTrace in SmartOS. Here are the slides: http://slides.com/benmurphy/deck

[ Parent | on HN ]