Seccomp denylist bypass via 32-bit argument truncation
Ricardo Branco says containerd, Podman, systemd and QEMU denylists can misread 32-bit arguments in 64-bit registers.
2 stories, newest first · one card per story
Ricardo Branco says containerd, Podman, systemd and QEMU denylists can misread 32-bit arguments in 64-bit registers.
Inko adds a cross-platform sandbox API using Landlock, Seatbelt, pledge, and unveil.
Today 1.6K readers · 2.4K views · 775 reads · all time 189K views