Container Isolation

No new privileges

Explore the no-new-privileges security option

References

• p. 33 — CVE-2019-5736 container breakout vulnerability
• p. 34 — Plan 9 namespaces
• p. 35 — lsns man page
• p. 35 — Containers From Scratch
• p. 41 — Alpine Linux releases
• p. 48 — Kubernetes docs: Pod user namespaces
• p. 48 — Docker docs: User namespace remapping
• p. 56 — Center for Internet Security (CIS)

Back to index