News for hackers. Stuff that matters.

nervous

tl;dr The Sylabs team recently discovered an exploit vector to all container runtimes, that allows a malicious user to gain additional privileges within a container on hosts running kernels that do not support the PR_SET_NO_NEW_PRIVS feature.

Singularity is not the only container platform affected; this vulnerability can be exploited using any container runtime on a vulnerable kernel.

Re:Keeping Your Car Safe from Electronic Thieves on Friday April 17, 2015 @06:51AM (#9393415)
this opens a new era in the car-sharing business!
Hint: Australia is not US