Tag
user-namespaces
- Aug 12, 2025 User Namespaces and the Mapping of UIDs How a process can hold full privilege over a subtree of the process hierarchy while holding none outside it, and what the uid_map translation table does at each syscall boundary. operating systems
- Jan 14, 2025 Capability Sets and UID Mapping in Rootless Containers How a user namespace turns UID 0 into an unprivileged identity, which capabilities survive the mapping, and why setuid binaries break in ways that look like permission bugs. virtualization
- Oct 20, 2022 Unprivileged User Namespaces and the Attack Surface They Open Why allowing any process to create a user namespace turns privileged kernel code paths into reachable ones, which subsystems are most exposed, and how the trade is bounded in practice. virtualization