Re:FreeBSD Jails for Fun and Profit (2020)
by antihero on Wednesday December 22, 2021 @11:39AM
(#29651624)
Can a process in them exec on the rest of your system?
[ Parent
| on HN ]
Re:FreeBSD Jails for Fun and Profit (2020)
by marcosdumay on Wednesday December 22, 2021 @01:42PM
(#29653339)
The fundamental thing about those features (and the equivalent on every system except Windows) is that you can never get more capabilities, only less. Once you are in a jail, there is no API for getting out of it.
You can't even see a binary from the rest of your system, and exec won't get you out.