Kernel Summit 2006: Paravirtualization and containers

Posted Jul 20, 2006 18:02 UTC (Thu) by mp (subscriber, #5615)
Parent article: Kernel Summit 2006: Paravirtualization and containers

Finally, there was some concern that containers might prove to be a useful tool for rootkit writers. With a bit of effort, a rootkit could put everybody within a container and, thus, easily hide itself.

Note that apparently the hardware support for virtualization brings the threat of a hypervisor-based rootkit without the OS even supporting any kind of virtualization itself.