Comment on Breaking Out of Docker via RunCparentComments−cpuguy837yDefinitely not the first. There was one with leaking file descriptors which weren't opened with O_CLOEXEC.Another with ptrace (fixed by making the process non-dumpable).
Comments
Definitely not the first. There was one with leaking file descriptors which weren't opened with O_CLOEXEC.
Another with ptrace (fixed by making the process non-dumpable).