Conversation

Notices

1. Ludovic Courtès (civodul@toot.aquilenet.fr)'s status on Friday, 19-Apr-2024 12:33:41 UTC Ludovic Courtès

   Recommendation is now to disable network namespaces to mitigate vulnerabilities due to their interaction with unprivileged user namespaces:
   https://www.openwall.com/lists/oss-security/2024/04/14/1

   That’s a sad outcome.

   • Ludovic Courtès (civodul@toot.aquilenet.fr)'s status on Friday, 19-Apr-2024 12:33:41 UTC Ludovic Courtès

     in reply to

     Incidentally, that’s another illustration that retrofitting namespaces in an ambient-authority monolithic kernel is tricky.

     This is in contrast with the Hurd, where per-process views are an inherent part of the design.

     Santa Claes 🇸🇪🇭🇰🎅 likes this.