Tag
privilege
- Jun 24, 2026 Capabilities and the Decomposition of Root Privilege How the single root check was split into distinct capabilities, how the permitted, effective and inheritable sets interact across execve, and why file capabilities and no_new_privs change the rules. operating systems
- Aug 12, 2025 User Namespaces and the Mapping of UIDs How a process can hold full privilege over a subtree of the process hierarchy while holding none outside it, and what the uid_map translation table does at each syscall boundary. operating systems
- May 25, 2024 Kernel Page Table Isolation and What It Costs on Every Trap Why splitting the kernel into a separate address space defends against speculative reads, how the switch is arranged to be nearly free, and where the remaining cost lands. memory systems
- Oct 20, 2022 Unprivileged User Namespaces and the Attack Surface They Open Why allowing any process to create a user namespace turns privileged kernel code paths into reachable ones, which subsystems are most exposed, and how the trade is bounded in practice. virtualization