Malware Found in the Ubuntu Snap Store

Re:Malware Found in the Ubuntu Snap Store by faho on Saturday May 12, 2018 @04:08PM (#17055766)

But this particular issue doesn't have anything to do with X!

[ Parent | on HN ]

Re:Malware Found in the Ubuntu Snap Store by 64kbisalluneed on Saturday May 12, 2018 @06:59PM (#17056465)

One word: lxc

[ Parent | on HN ]

Re:Malware Found in the Ubuntu Snap Store by faho on Saturday May 12, 2018 @07:35PM (#17056585)

And the explanation for that word?

It's still nothing to do with X, and it's not certain that it would plug the "hole" that is being used here.

This "exploit" requires unfettered (or at least not completely throttled) access to the CPU and a way to send the spoils home via the network.

Would this actually be stopped with "lxc"? I doubt it'd do much to curb the CPU abuse, and network access is something games frequently demand (in something like this for e.g. leaderboards or a social sharing feature), so I'd bet that nobody would bat an eye.

[ Parent | on HN ]

Re:Malware Found in the Ubuntu Snap Store by 64kbisalluneed on Saturday May 12, 2018 @07:41PM (#17056610)

Sorry, missplaced my answer. It was regarding the guy above yours concerning apps in general can create havoc to a system. I mean that using containers like lxc can create a sandbox.

[ Parent | on HN ]

Re:Malware Found in the Ubuntu Snap Store by michaelmrose on Sunday May 13, 2018 @02:38AM (#17057630)

Containers under linux aren't in themselves very secure at all. This isn't inherently so. Supposedly solaris can do much better for example.

[ Parent | on HN ]

Re:Malware Found in the Ubuntu Snap Store by irundebian on Sunday May 13, 2018 @06:01AM (#17058154)

What security guarantees cannot be hold by container technologies such as LXC, cgroups, namespaces and docker?

[ Parent | on HN ]