Interference from user space

Posted Mar 2, 2024 2:08 UTC (Sat) by roc (subscriber, #30627)
In reply to: Interference from user space by corbet
Parent article: A sandbox mode for the kernel

Maybe the people who don't trust root should run everything in a container where they're root in the container's user namespace but not the toplevel user namespace.