Comment by roughly
13 hours ago
Huh, so the assertion here that this is a break past the KVM boundary broadly, then?
Also - re: the jailer, do you have more info on that being popped?
13 hours ago
Huh, so the assertion here that this is a break past the KVM boundary broadly, then?
Also - re: the jailer, do you have more info on that being popped?
The jailer is just a seccomp sandbox. It's not a novel defense system. Sandboxes get broken all the time.