News for hackers. Stuff that matters.

A comment on Codex just found a "workaround" of not having sudo on my PC. Parent comment

Re:Codex just found a "workaround" of not having sudo on my PC by fpoling on Sunday May 31, 2026 @03:55PM (#48349143)
User namespaces significantly rise the risk of exploits and many setups disable them. One may argue that Docker should have used them when they were available, but that would break too many useful setups involving privileged containers.
[ Parent | on HN ]
Re:Codex just found a "workaround" of not having sudo on my PC by worik on Sunday May 31, 2026 @05:56PM (#48350138)
> User namespaces significantly rise the risk of exploits

How?

[ Parent | on HN ]
Re:Codex just found a "workaround" of not having sudo on my PC by tominous on Sunday May 31, 2026 @10:11PM (#48351912)
Here's one (CIFSwitch) from a couple of days ago: https://heyitsas.im/posts/cifswitch/
[ Parent | on HN ]
Re:Codex just found a "workaround" of not having sudo on my PC by LtWorf on Monday June 01, 2026 @01:22AM (#48352918)
Ah of course, we should not use userns because it might be vulnerable to some yet to be discovered vulnerability. The better alternative is to give full root access so we won't have surprises.
[ Parent | on HN ]
Re:Codex just found a "workaround" of not having sudo on my PC by fpoling on Monday June 01, 2026 @02:08AM (#48353167)
The full access to the docker socket from a user account is typically used on a development machine where malware has many other opportunities to become a root.
[ Parent | on HN ]