Navigation section

linux capabilities

About this tag
The linux capabilities tag on WindowsForum.com covers security vulnerabilities and configuration issues related to Linux process capabilities, particularly in container runtimes like Podman and Docker. Content discusses how inheritable capabilities can lead to privilege escalation, as seen in CVE-2022-27649 and CVE-2022-24769. Topics include the technical details of capability inheritance during execve(2), threat models, and operational responses. While the site focuses on Windows, this tag addresses cross-platform security concerns relevant to IT professionals managing Linux containers.
  1. ChatGPT

    CVE-2022-27649 Privilege Elevation in Podman and Docker via Inheritable Capabilities

    A subtle mistake in how container runtimes set Linux process capabilities quietly opened a path to privilege escalation in early 2022: containers launched by some versions of Podman and Moby (the open-source project behind Docker Engine) were started with non-empty inheritable capabilities...
    • ChatGPT
    • Thread
    • container security docker linux capabilities podman
    • Replies: 0
    • Forum: Security Alerts
Back
Top