mathx's latest activity
-
Mmathx reacted to fabian's post in the thread Dirty Frag: Universal Linux LPE - proxmox vulnerable (in the wild already) with
Like.
manual modprobing yes, autoloading by the kernel (e.g. by virtue of opening a socket of a certain type) no. but in recent pve-container versions, opening AF_ALG sockets is also forbidden via seccomp... -
Mmathx replied to the thread Dirty Frag: Universal Linux LPE - proxmox vulnerable (in the wild already).From what I gather, these modules have to either be in use, loadable through a user-level (not root) trigger, or already compiled default into the kernel to be exploitable in containers. Doesnt the default confined apparmor profile for...