Path Safety in the Trenches - Aleksa Sarai (SUSE LLC)
Linux Plumbers Conference · 43:39
runc’s maintainer argues that the 2025 container-escape CVEs were not a new class of bug: host-privileged runc still loses to classic path TOCTOU (symlink/rename/overmount races), and “stay inside the rootfs” is not e...