Conversation

Notices

1. Embed this notice
   Ludovic Courtès (civodul@toot.aquilenet.fr)'s status on Friday, 19-Apr-2024 18:44:39 JST Ludovic Courtès

   Recommendation is now to disable network namespaces to mitigate vulnerabilities due to their interaction with unprivileged user namespaces:
   https://www.openwall.com/lists/oss-security/2024/04/14/1

   That’s a sad outcome.

   • Haelwenn /элвэн/ :triskell: likes this.
   • Embed this notice
     Ludovic Courtès (civodul@toot.aquilenet.fr)'s status on Friday, 19-Apr-2024 22:16:55 JST Ludovic Courtès

     in reply to

     Incidentally, that’s another illustration that retrofitting namespaces in an ambient-authority monolithic kernel is tricky.

     This is in contrast with the Hurd, where per-process views are an inherent part of the design.

     clacke likes this.