[lxc-users] Linuxcontainers security?

Ingo Baab ib at baab.de
Sun Mar 19 16:08:24 UTC 2017


Hi LXD/LXC Users,

  today I read that at the hacking contest "Pwn2Own" 'they' escaped from 
a VMWare
(running Windows10) using three exploits together (exploiting Edge and 
using a windows-
10-kernel-hack..) [1].

I asked myself, how secure is a (my) LXD/LXC container system?

How do you 'estimate' the security running a webhosting-container as I 
do getting compromised?
I do successfully setup and run nginx, php7, redis-server, mysql-server 
on my linux-containers.

Any information or links are highly apreciated,
Ingo Baab
___
[1] 
https://arstechnica.com/security/2017/03/hack-that-escapes-vm-by-exploiting-edge-browser-fetches-105000-at-pwn2own/



More information about the lxc-users mailing list