An excursion into a mount propagation bug

brauner.io

2 pointshornedhob1 comment

"Once the mechanics of the bug are understood it’s easy to trigger. Because of unprivileged user namespaces it is available to unprivileged users."