Remote Code Execution as a Service

Re:Remote Code Execution as a Service by raesene9 on Tuesday March 07, 2023 @03:19PM (#35060611)

There have been a bunch of Linux kernel privesc vulns that can be converted to container breakouts from standard Linux containers, just look at bounties from Google's kCTF (AFAIK they've had 10 different kernel vulns in 2 years)

It's possible to mitigate/reduce them for sure, with appropriate hardening, but the Linux kernel is still quite a big attack surface.

[ Parent | on HN ]

Re:Remote Code Execution as a Service by flangola7 on Tuesday March 07, 2023 @05:07PM (#35061956)

What about kernels like seL4? I think everyone will abandon monolithic kernels one day because they have too much attack surface.

[ Parent | on HN ]

Re:Remote Code Execution as a Service by yjftsjthsd-h on Tuesday March 07, 2023 @11:34PM (#35065286)

Is anyone running normal workloads (node/java/php/python/whatever) on seL4 without sticking Linux in the middle?

[ Parent | on HN ]