|
You are here |
olegkutkov.me | ||
| | | | |
xcellerator.github.io
|
|
| | | | | In all the playing around I've been doing with Linux kernel modules, I decided to see what would happen if you tried to load one from a Docker container. It turns out that privileged containers (or just those with CAP_SYS_MODULE) are able to use the sys_init_module() and sys_finit_module() syscalls - which are what's used to load kernel modules. As all containers share their kernel with the host (unlike VMs), this clearly results in yet another complete system compromise. | |
| | | | |
sergioprado.blog
|
|
| | | | | Tracing is a useful technique to find bugs in software, and ftrace is the tracing framework built into the Linux kernel. | |
| | | | |
wittchen.io
|
|
| | | | | Sometimes we may want to format external USB drive. I recently encountered a situation, where I had bootable USB drive with operating system ready to install, but I wanted to remove all this stuff and use disk for storing data. I couldn't format this disk with GUI tools for some reason and I kept getting errors or information that it's not possible. In case you don't know, on Linux everything is always possible, so I quit that GUI tool, opened terminal and start playing with good old and simple programs. | |
| | | | |
nabeelvalley.co.za
|
|
| | | Using a Docker Container as a development container using the Visual Studio Code Remote-Containers Extension | ||