Linus Torvalds writes: (Summary) On Wed, Feb 21, 2018 at 10:21 AM, Andi Kleen <ak@linux.intel.com> wrote:
Anybody who does that deserves whatever the hell they get. If you can create users indiscriminately enough, you can bypass most other resource limits too.
resource limits too.
If you think containers protect against security issues from untrusted users, I have a bridge to sell you.
users, I have a bridge to sell you.
Linus
Linus
Linus
[...]
create a lot of uids and switch between them.Anybody who does that deserves whatever the hell they get. If you can create users indiscriminately enough, you can bypass most other resource limits too.
resource limits too.
If you think containers protect against security issues from untrusted users, I have a bridge to sell you.
users, I have a bridge to sell you.
Linus
Linus
Linus