• 0 Posts
  • 13 Comments
Joined 2 years ago
cake
Cake day: February 3rd, 2025

help-circle



  • we desperately need kernel livepatching to be easier. that would have broken this exploit chain. also almost no services need esp or rxrpc or exotic things lile af_alg, but proper sandboxing takes a lot of time and trial and error. few services list all the capabilities, filesystems, address families, and syscalls they need to function. even if you get the service to boot there’s a good chance some feature will touch the electric fence during operation